CVE-2025-52652CWE-451

CVE-2025-52652

Low · published September 7, 2026

CVSS v3.1
3.5
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-451 · User Interface (UI) Misrepresentation of Critical Information
Published
2026-09-07T15:17Z
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132828 · [email protected]
EPSS history
Timeline
  • 09 SEP 03:17Z
    EPSS moved — → 0%
    epss
  • 07 SEP 10:37Z
    HCL MyXalytics is affected by multiple security vulnerabilities.
    cvelistv5