CVE-2025-52658: low-severity vulnerability in HCL Software MyXalytics
HCL MyXalytics is affected by the use of vulnerable/outdated versions
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.5epss 0.2%
In short
HCL MyXalytics uses outdated software components with known security vulnerabilities. This means attackers could exploit these weaknesses to compromise the application.
Technical detail
The application contains vulnerable or outdated dependencies that may be leveraged to execute attacks via publicly disclosed exploits. This condition increases the application's attack surface and reduces the security posture unless affected components are updated to patched versions.
Summary generated and translated by AI from the official description.
HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security risks that could be exploited.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Affected products
HCL Software · MyXalyticsRelated CVEs — HCL Software MyXalytics
In the same product, most dangerous first.
CVE-2025-52657LOWHCL MyXalytics is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-59870HIGHImproper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security riskEPSS 0.3%CVE-2025-52652LOWHCL MyXalytics is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2025-52651LOWHCL MyXalytics is affected by multiple security vulnerabilities.EPSS 0.2%