HCL MyXalytics Sensitive Information Disclosure Vulnerability
Vulnerability
A vulnerability in HCL MyXalytics allows for the disclosure of sensitive information through the HTTP response header, which reveals the server's name and version as Microsoft-HTTP API/2.0. This issue could potentially be exploited to gather information about the server that could be useful in a broader attack.
Impact
Exposing the server name and version in the HTTP response header can lead to information disclosure, allowing attackers to identify the server software and version, which could be exploited in a targeted attack.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.0exploitability
4.8remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.
