Dryice Aex (Hcltech) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-06-28. Vendor: Hcltech.

CVEs of Dryice Aex

• CVE-2024-30135 - CVSS 7.5 (high), 2024-06-28: HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken.
• CVE-2024-30111 - CVSS 7.5 (high), 2024-06-28: HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due…
• CVE-2024-30110 - CVSS 9.8 (critical), 2024-06-28: HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system…
• CVE-2024-30109 - CVSS 6.1 (medium), 2024-06-28: HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick…
• CVE-2023-37526 - CVSS 6.5 (medium), 2024-05-14: HCL DRYiCE Lucy (now AEX) is affected by a Cross Origin Resource Sharing (CORS) vulnerability. The mobile app is vulnerable to a CORS misconfiguration which…