How severe is CVE-2023-50345?

CVE-2023-50345 has a CVSS 3.x base score of 3.7, rated low severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.

Is CVE-2023-50345 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (17th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2023-50345?

CVE-2023-50345 primarily affects Hcltech Dryice Myxalytics. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2023-50345?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2023-50345 have an EU (EUVD) identifier?

Yes. CVE-2023-50345 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-55146.

When was CVE-2023-50345 published?

CVE-2023-50345 was published on 2024-01-03 and last updated on 2026-06-17.

CVE-2023-50345

CVE-2023-50345 is a low-severity vulnerability in Hcltech Dryice Myxalytics with a CVSS 3.x base score of 3.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-601.

Key facts

Severity: Low (CVSS 3.x base score 3.7)
EPSS exploit prediction: 0% (17th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2023-55146
Weakness: CWE-601
Affected product: Hcltech Dryice Myxalytics
Published: 2024-01-03
Last modified: 2026-06-17

Description

HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats.

Frequently asked questions

What is CVE-2023-50345?: HCL DRYiCE MyXalytics is impacted by an Open Redirect vulnerability which could allow an attacker to redirect users to malicious sites, potentially leading to phishing attacks or other security threats.
How severe is CVE-2023-50345?: CVE-2023-50345 has a CVSS 3.x base score of 3.7, rated low severity. It is exploitable over network with high attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability none.
Is CVE-2023-50345 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (17th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2023-50345?: CVE-2023-50345 primarily affects Hcltech Dryice Myxalytics. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2023-50345?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2023-50345 have an EU (EUVD) identifier?: Yes. CVE-2023-50345 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-55146.
When was CVE-2023-50345 published?: CVE-2023-50345 was published on 2024-01-03 and last updated on 2026-06-17.

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608

Affected products (3)

cpe:2.3:a:hcltech:dryice_myxalytics:5.9:*:*:*:*:*:*:*
cpe:2.3:a:hcltech:dryice_myxalytics:6.0:*:*:*:*:*:*:*
cpe:2.3:a:hcltech:dryice_myxalytics:6.1:*:*:*:*:*:*:*

More vulnerabilities in Hcltech Dryice Myxalytics

CVE-2024-42168 — High (CVSS 8.9): HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability. An attacker can deploy a web server that…
CVE-2023-45722 — High (CVSS 8.8): HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to…
CVE-2023-50343 — High (CVSS 8.3): HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints…
CVE-2023-45724 — High (CVSS 8.2): HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability. The web application permits the…
CVE-2023-50351 — High (CVSS 8.2): HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to…
CVE-2023-50350 — High (CVSS 8.2): HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an…

All CVEs affecting Hcltech Dryice Myxalytics →

Other CWE-601 (Open Redirect) vulnerabilities

CVE-2018-3774 — Critical (CVSS 10.0): Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open…
CVE-2019-25282 — Critical (CVSS 9.8): V-SOL GPON/EPON OLT Platform v2.03 contains an open redirect vulnerability in the script that allows attackers to…
CVE-2020-36912 — Critical (CVSS 9.8): Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script…
CVE-2025-43526 — Critical (CVSS 9.8): This issue was addressed with improved URL validation. This issue is fixed in Safari 26.2, macOS Tahoe 26.2. On a Mac…
CVE-2025-55031 — Critical (CVSS 9.8): Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An…
CVE-2024-22891 — Critical (CVSS 9.8): Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link.

Browse all CWE-601 (Open Redirect) vulnerabilities →