Hcltech Dryice Aex vulnerabilities

5 CVEs affecting Hcltech Dryice Aex, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-30135, published 2024-06-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-30110, published 2024-06-28. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system which can cause the system to behave in…
CVE-2023-37526, published 2024-05-14. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. HCL DRYiCE Lucy (now AEX) is affected by a Cross Origin Resource Sharing (CORS) vulnerability. The mobile app is vulnerable to a CORS misconfiguration which could potentially allow unauthorized…
CVE-2024-30109, published 2024-06-28. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or…
CVE-2024-30135, published 2024-06-28. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken.
CVE-2024-30111, published 2024-06-28. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain…