CVE-2024-42174: HCL MyXalytics is affected by username enumeration vulnerability
3.7
CVSS
Description
HCL MyXalytics is affected by username enumeration vulnerability. This allows a malicious user to perform enumeration of application users, and therefore compile a list of valid usernames.
Classification
CVE ID: CVE-2024-42174
CVSS Base Severity: LOW
CVSS Base Score: 3.7
Affected Products
Vendor: HCL Software
Product: DRYiCE MyXalytics
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.47% (scored less or equal to compared to others)
EPSS Date: 2025-02-09 (when was this score calculated)