HCL MyXalytics is affected by improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NHcltech Myxalytics
APPHcltech6.26.36.46.56.66.7
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2025-62319CRITICAL9.8PL ✓ten sam vendor
Boolean-Based SQL Injection umożliwiający wstrzyknięcie dowolnego SQL
CVE-2023-37502CRITICAL9.0ten sam vendor
HCL Compass is vulnerable to lack of file upload security. An attacker could upload files containing active c...
CVE-2023-37538CRITICAL9.3ten sam vendor
HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflect...
CVE-2022-42447CRITICAL9.6ten sam vendor
HCL Compass is vulnerable to Cross-Origin Resource Sharing (CORS). This vulnerability can allow an unprivilege...
CVE-2022-44750CRITICAL9.8ten sam vendor
HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. ...