CVE-2024-30135— Sensitive Information Disclosure vulnerability affects DRYiCE AEX v10
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-30135
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sensitive Information Disclosure vulnerability affects DRYiCE AEX v10
Source: NVD (National Vulnerability Database)
Vulnerability Description
HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
信息暴露
Source: NVD (National Vulnerability Database)
Vulnerability Title
HCL Technologies HCL DRYiCE AEX 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HCL Technologies HCL DRYiCE AEX是美国HCL Technologies公司的一种端到端的数字化工作场所解决方案，它可以改变员工体验、提高生产力，同时通过人工智能优化成本。 HCL Technologies HCL DRYiCE AEX v10版本存在安全漏洞，该漏洞源于当拍摄快照时，可能会受到移动应用程序中敏感信息泄露的影响。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HCL Software | DRYiCE AEX | 10 | - |
II. Public POCs for CVE-2024-30135
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-30135
请登录查看更多情报信息。
Same Patch Batch · HCL Software · 2024-06-28 · 4 CVEs total
| CVE-2024-30110 | 3.7 LOW | Lack of input validation vulnerability affects DRYiCE AEX v10 |
| CVE-2024-30109 | 3.7 LOW | Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10 |
| CVE-2024-30111 | 3.3 LOW | Missing Root Detection vulnerability affects DRYiCE AEX v10 |
IV. Related Vulnerabilities
Same vendor: HCL Software
- CVE-2025-31974
HCL BigFix Service Management (SM) is susceptible to a Root - CVE-2025-31976
HCL BigFix Service Management (SM) is vulnerable to insuffic - CVE-2025-31978
HCL BigFix Service Management (SM) does not adequately sanit - CVE-2025-31959
HCL BigFix Service Management (SM) application fails to stri - CVE-2025-31982
HCL BigFix Service Management (SM) had directories that were
Same weakness: CWE-200
- CVE-2026-42333
quarkus-openapi-generator has overly broad path-parameter ma - CVE-2026-8198
Activity Logs, User Activity Tracking, Multisite Activity Lo - CVE-2026-42456
AnythingLLM: Cross-User TTS Audio Disclosure via Chat ID (ID - CVE-2026-41520
Cillium exposes sensitive information included in the cilium - CVE-2026-25199
Apache CloudStack: Proxmox Extension Allows Unauthorized Cro
V. Comments for CVE-2024-30135
No comments yet