CVE-2024-30109: Hcltech Dryice Aex

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended.

Affected products

• Hcltech Dryice Aex: version 10.0 only

Published 2024-06-28. Last modified 2026-06-17.