{"id":"CVE-2024-42177","aliases":["EUVD-2024-54502","GHSA-fhm7-xr45-vvhp"],"status":"published","title":"HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH \u0026 LUCKY13 vulnerabilities","description":"HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH \u0026 LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted data, steal sensitive information, or inject malicious code into the system.","severity":{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00171,"percentile":0.06599,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-326"],"published":"2025-04-17T19:18:05Z","modified":"2026-06-17T07:48:59Z","products":[{"vendor":"hcl software","product":"hcl myxalytics"},{"vendor":"hcltech","product":"dryice_myxalytics"}],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article\u0026sysparm_article=KB0120504","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-42177"},{"url":"https://github.com/advisories/GHSA-fhm7-xr45-vvhp"}],"sources":{"cve":[{"id":"CVE-2024-42177","title":"HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH \u0026 LUCKY13 vulnerabilities","description":"HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH \u0026 LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted data, steal sensitive information, or inject malicious code into the system.","status":"published","published":"2025-04-17T19:18:05.137Z","modified":"2025-04-17T19:29:01.902Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-326"],"updated_at":"2026-11-02T14:34:02.652467Z"}],"euvd":[{"id":"EUVD-2024-54502","description":"HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH \u0026 LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted data, steal sensitive information, or inject malicious code into the system.","status":"published","published":"2025-04-17T19:18:05Z","modified":"2025-04-17T19:29:01Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T20:52:20.597725Z"}],"ghsa":[{"id":"GHSA-fhm7-xr45-vvhp","title":"HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH \u0026 LUCKY13 vulnerabilities....","description":"HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH \u0026 LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted data, steal sensitive information, or inject malicious code into the system.","status":"published","published":"2025-04-17T21:31:05Z","modified":"2025-04-17T21:31:10Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-326"],"updated_at":"2026-11-02T15:01:37.946112Z"}],"nvd":[{"id":"CVE-2024-42177","description":"HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH \u0026 LUCKY13 vulnerabilities. Attackers can exploit the weakness in the ciphers to intercept and decrypt encrypted data, steal sensitive information, or inject malicious code into the system.","status":"published","published":"2025-04-17T20:15:26.513Z","modified":"2026-06-17T07:48:59.313Z","cvss":[{"version":"3.1","score":2.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-326"],"updated_at":"2026-11-02T14:10:46.40251Z"}]}}