CVE-2024-42174: Hcltech Dryice Myxalytics

Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days.

HCL MyXalytics is affected by username enumeration vulnerability. This allows a malicious user to perform enumeration of application users, and therefore compile a list of valid usernames.

Affected products

• Hcltech Dryice Myxalytics: version 6.3 only

Published 2025-01-11. Last modified 2026-06-17.