CVE-2025-52657: falha de baixa gravidade em HCL Software MyXalytics
HCL MyXalytics is affected by multiple security vulnerabilities.
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.5epss 0.3%
HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Produtos afetados
HCL Software · MyXalyticsCVEs relacionadas — HCL Software MyXalytics
No mesmo produto, das mais perigosas para as menos.
CVE-2025-59870HIGHImproper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security riskEPSS 0.3%CVE-2025-52652LOWHCL MyXalytics is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2025-52651LOWHCL MyXalytics is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2025-52658LOWHCL MyXalytics is affected by the use of vulnerable/outdated versionsEPSS 0.2%