CVE-2023-50348

Improper Error Handling affects DRYiCE MyXalytics

Low3.1EPSS 0.32%

Published: 3 Jan 2024
Updated: 18 Jun 2025
Reserved: 7 Dec 2023
Assigned by: HCL

Description

HCL DRYiCE MyXalytics is impacted by an improper error handling vulnerability. The application returns detailed error messages that can provide an attacker with insight into the application, system, etc.

Scores

CVSS scores of CVE-2023-50348, by who scored it
Scored by	CVSS	Score	Vector
HCLCNA (assigner)	3.1	Low3.1	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
NVDNVD · Modified	3.1	Medium5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS (exploitation in 30 days): 0.32% · top 75% of all CVEs (7 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 3.1.

Weakness

CWE-209 Generation of Error Message Containing Sensitive Information (opens in a new tab)All about CWE-209 and its CVEs

Affected products

HCL Software · DRYiCE MyXalytics
- affected 5.9, 6.0, 6.1

References (1)

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109608 (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2023-50348](https://trackcve.app/badge/CVE-2023-50348.svg)](https://trackcve.app/cve/CVE-2023-50348)

Record last updated 18 Jun 2025, 15:32 UTC.