CVE-2024-42175

HCL MyXalytics is affected by a weak input validation vulnerability. The application accepts special characters and there is no length validation. This can lead to security vulnerabilities like SQL injection, XSS, and buffer overflow.

• CWE-20

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0118149Vendor Advisory

Published

Jan 11, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4217The shortcodes-ultimate-pro WordPress plugin before 7.1.5 do…4.7
• CVE-2024-42170HCL MyXalytics is affected by a session fixation vulnerabili…6.8
• CVE-2024-42171HCL MyXalytics is affected by a session fixation vulnerabili…6.4
• CVE-2024-42172HCL MyXalytics is affected by broken authentication. It all…9.8
• CVE-2024-42173HCL MyXalytics is affected by an improper password policy im…4.8
• CVE-2024-42174HCL MyXalytics is affected by username enumeration vulnerabi…3.7
• CVE-2024-42176HCL MyXalytics is affected by concurrent login vulnerability…8
• CVE-2024-42177HCL MyXalytics is affected by SSL∕TLS Protocol affected with…6.4
• CVE-2024-42178HCL MyXalytics is affected by a failure to restrict URL acce…7.5
• CVE-2024-42179HCL MyXalytics is affected by sensitive information disclosu…2.7
• CVE-2024-4218The AffiEasy plugin for WordPress is vulnerable to Cross-Sit…6.5
• CVE-2024-42180HCL MyXalytics is affected by a malicious file upload vulner…9.8