Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2024-30109

Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10

Description

HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software DRYiCE AEX

Default version status: unaffected

  • 10affected

References