CVE-2025-52657

Full vulnerability record from the local CVENow database.

Description

HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability.

Severity

LOW

CVSS score

3.5 (v3.1)

Vulnerability status

Undergoing Analysis

Source identifier

[email protected]

Published

2026-09-07 11:17:20.470000

Last modified

2026-10-19 22:10:00.130000

View original CVE JSON

{
  "id": "CVE-2025-52657",
  "sourceIdentifier": "[email protected]",
  "published": "2026-09-07T11:17:20.470",
  "lastModified": "2026-10-19T22:10:00.130",
  "vulnStatus": "Undergoing Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability."
    },
    {
      "lang": "es",
      "value": "HCL MyXalytics se vio afectado por una potencial vulnerabilidad de DoS. Permite a los usuarios introducir datos sin ninguna restricción en el número de caracteres, lo que puede impactar el rendimiento o la disponibilidad del sistema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "HCL Software",
          "product": "MyXalytics",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "v6.6, v6.7, v6.8 and v6.8.0.1",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
          "baseScore": 3.5,
          "baseSeverity": "LOW",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 2.1,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-09-08T15:07:02.095461Z",
          "id": "CVE-2025-52657",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132828",
      "source": "[email protected]"
    }
  ]
}