CVE-2025-59854: falha de baixa gravidade em HCL DFXAnalytics
HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.1epss 0.1%
HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header, which could allow an attacker to exploit browser-specific rendering flaws or bypass security controls that should instead be managed by a robust Content Security Policy (CSP).
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
HCL · DFXAnalyticsCVEs relacionadas — HCL DFXAnalytics
No mesmo produto, das mais perigosas para as menos.
CVE-2025-59851LOWHCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerabilityEPSS 0.2%CVE-2025-59853LOWHCL DFXAnalytics is affected by an Improper Error Handling vulnerabilityEPSS 0.2%CVE-2025-31970MEDIUMHCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerabilityEPSS 0.1%CVE-2025-59852LOWHCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerabilityEPSS 0.1%