HCL MyXalytics Cross-Domain Script Include Vulnerability

A Cross-Domain Script Include vulnerability exists in HCL MyXalytics version 6.6. This vulnerability allows the loading of third-party scripts without proper integrity checks or validation, potentially enabling external code to execute within the application's context. Such execution could lead to data exposure or unauthorized actions.

Impact

Exploitation of this vulnerability could result in unauthorized execution of external scripts, potentially allowing for data exposure or execution of unauthorized actions within the application.

Remediation

Users can upgrade to HCL MyXalytics version 6.7, which addresses this vulnerability. For assistance with the upgrade process, customers can contact the HCL MyXalytics support team.