CVE-2025-52651

Full vulnerability record from the local CVENow database.

Description

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues.

Severity

LOW

CVSS score

3.5 (v3.1)

Vulnerability status

Undergoing Analysis

Source identifier

[email protected]

Published

2026-09-07 11:17:19.503000

Last modified

2026-10-19 22:10:00.130000

View original CVE JSON

{
  "id": "CVE-2025-52651",
  "sourceIdentifier": "[email protected]",
  "published": "2026-09-07T11:17:19.503",
  "lastModified": "2026-10-19T22:10:00.130",
  "vulnStatus": "Undergoing Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues."
    },
    {
      "lang": "es",
      "value": "HCL MyXalytics se vio afectado por una vulnerabilidad de validación de entrada incorrecta. Permite que datos maliciosos o inesperados causen un comportamiento del sistema no deseado o problemas de seguridad."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "HCL Software",
          "product": "MyXalytics",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "v6.6, v6.7, v6.8 and v6.8.0.1",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
          "baseScore": 3.5,
          "baseSeverity": "LOW",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.1,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-09-08T15:23:15.467919Z",
          "id": "CVE-2025-52651",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132828",
      "source": "[email protected]"
    }
  ]
}