CVE-2025-31970: falha de média gravidade em HCL DFXAnalytics
HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.1%
HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives for object-src and base-uri, which could allow an attacker to exploit injection vectors such as Cross-Site Scripting (XSS)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
HCL · DFXAnalyticsCVEs relacionadas — HCL DFXAnalytics
No mesmo produto, das mais perigosas para as menos.
CVE-2025-59851LOWHCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerabilityEPSS 0.2%CVE-2025-59853LOWHCL DFXAnalytics is affected by an Improper Error Handling vulnerabilityEPSS 0.2%CVE-2025-59854LOWHCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerabilityEPSS 0.1%CVE-2025-59852LOWHCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerabilityEPSS 0.1%