CVE-2025-52653CWE-79cross-site-scripting

CVE-2025-52653

High · published October 3, 2025

CVSS v3.1
7.6
EPSS
0%
Percentile
16.7
In the wild
Unconfirmed
What it is

HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorized scripts, potentially resulting in unauthorized actions or access.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00259 · 16.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-10-03T22:15Z
Affected products (1)
ProductVersionsFixed in
hcltech/dryice_myxalyticsall versions—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124411 · [email protected]
EPSS history
Timeline
  • 03 OCT 17:59Z
    Cross Site Scripting vulnerability in the web application
    cvelistv5