CVE-2025-52652: falha de baixa gravidade em HCL Software MyXalytics
HCL MyXalytics is affected by multiple security vulnerabilities.
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.5epss 0.2%
HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
HCL Software · MyXalyticsCVEs relacionadas — HCL Software MyXalytics
No mesmo produto, das mais perigosas para as menos.
CVE-2025-52657LOWHCL MyXalytics is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-59870HIGHImproper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security riskEPSS 0.3%CVE-2025-52651LOWHCL MyXalytics is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2025-52658LOWHCL MyXalytics is affected by the use of vulnerable/outdated versionsEPSS 0.2%