Team IT Security (TSEC) Nachrichtenportal Logo


🕵️ CVE-2023-50343 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 API Endpoint access control (KB0109608)


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability was found in HCL DRYiCE MyXalytics 5.9/6.0/6.1. It has been classified as critical. This affects an unknown part of the component API Endpoint. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2023-50343. It is possible to initiate the attack remotely. There is no exploit available. ...

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ TIBCO FTP Community Edition up to 6.5.0 on Windows Server/C API/Golang API/Java API/.Net API access control


📈 32.91 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-7278 | McAfee Endpoint Security up to 10.6.1/10.7.0 on Windows Access Control access control


📈 29.72 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50342 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 resource injection (KB0109608)


📈 27.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50341 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 information disclosure (KB0109608)


📈 27.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-45723 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 Endpoint path traversal (KB0109608)


📈 27.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50348 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 information exposure (KB0109608)


📈 27.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50345 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 redirect (KB0109608)


📈 27.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50343 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 API Endpoint access control (KB0109608)


📈 27.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-45722 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 pathname traversal (KB0109608)


📈 27.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-45724 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 improper authentication (KB0109608)


📈 27.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50346 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 Endpoint information disclosure (KB0109608)


📈 27.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50350 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 cryptographic issues (KB0109608)


📈 27.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2023-50351 | HCL DRYiCE MyXalytics 5.9/6.0/6.1 Key Rotation cryptographic issues (KB0109608)


📈 27.48 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-39801 | SAP GRC Access control Emergency Access Management Firefighter Session access control (GHSA-jjjv-grgr-v8h3)


📈 25.76 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco SD-WAN vManage Software API Endpoint access control [CVE-2021-1515]


📈 25.49 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-1598 | WPQA Builder Plugin up to 5.3 on WordPress REST API Endpoint access control


📈 25.49 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-45438 | Apache Superset up to 1.5.2/2.0.0 REST API Get Endpoint access control


📈 25.49 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-3112 | Cisco Data Center Network Manager REST API Endpoint access control (cisco-sa-20200219-dcnm-priv-es)


📈 25.49 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2020-5244 | BuddyPress up to 5.1.1 REST API Endpoint Request access control


📈 25.49 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-20283 | Cisco Nexus Dashboard up to 3.0 API Endpoint access control (cisco-sa-ndidv-LmXdvAf2)


📈 25.49 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-1665 | lunary-ai lunary up to 1.2.6 API Endpoint /v1/evaluations access control


📈 25.49 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-5714 | lunary-ai lunary up to 1.2.4 API Endpoint org_id access control


📈 25.49 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2015-8154 | Symantec Endpoint Protection up to 12.1 RU6-MP3 Application/Control ADC SysPlant.sys access control (XFDB-111565 / Nessus ID 90199)


📈 25.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-47577 | Zoho ManageEngine Device Control Plus 10.1.2228.15 Endpoint Protection Agent access control


📈 25.01 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2022-47578 | Zoho ManageEngine Device Control Plus 10.1.2228.15 Endpoint Protection Agent access control


📈 25.01 Punkte
🕵️ Sicherheitslücken

🕵️ CLA-Assistant up to 2.8.4 API Endpoint access control


📈 24.37 Punkte
🕵️ Sicherheitslücken

🕵️ Netgear R7450 1.2.0.62_1.0.1 SOAP API endpoint access control


📈 24.37 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-38514 | ChatGPTNextWeb ChatGPT-Next-Web up to 2.12.3 WebDav API Endpoint endpoint server-side request forgery (GHSA-gph5-rx77-3pjg)


📈 24.18 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco TelePresence Collaboration Endpoint Video Endpoint API exposure of resource


📈 23.07 Punkte
🕵️ Sicherheitslücken

🕵️ Cisco TelePresence Collaboration Endpoint/RoomOS Video Endpoint API path traversal


📈 23.07 Punkte
🕵️ Sicherheitslücken

📰 Worldwide Enterprise Endpoint Security Industry to 2027: Focus on Antivirus, Firewall, Endpoint Device Control, and Anti-Spyware/Anti-Malware


📈 22.6 Punkte
📰 IT Security Nachrichten

🕵️ CVE-2022-1656 | JupiterX Theme up to 2.0.6 lib/api/api/ajax.php jupiterx_api_ajax_ access control


📈 22.56 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2019-16919 | Harbor API Access Control API Request default permission (GHSA-x2r2-w9c7-h624)


📈 22.56 Punkte
🕵️ Sicherheitslücken

🕵️ CVE-2024-27602 | Alldata 0.4.6 /api/system/v2/api-docs access control


📈 22.56 Punkte
🕵️ Sicherheitslücken

🕵️ Medium CVE-2020-14231: Hcltechsw Hcl client application access


📈 22.01 Punkte
🕵️ Sicherheitslücken

matomo
•