CVE-2025-52654CWE-80

CVE-2025-52654

Medium · published October 3, 2025

CVSS v3.1
4.6
EPSS
0%
Percentile
7.0
In the wild
Unconfirmed
What it is

HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output without proper handling, potentially allowing unauthorized content injection and manipulation.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00177 · 7.0th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2025-10-03T23:15Z
Affected products (1)
ProductVersionsFixed in
hcltech/dryice_myxalyticsall versions—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124411 · [email protected]
EPSS history
Timeline
  • 03 OCT 18:11Z
    HCL MyXalytics is affected by an HTML Injection
    cvelistv5