CVE-2025-52656CWE-915

CVE-2025-52656

High · published October 3, 2025

CVSS v3.1
7.6
EPSS
0%
Percentile
15.7
In the wild
Unconfirmed
What it is

HCL MyXalytics: 6.6.  is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00252 · 15.7th percentile
Weakness
CWE-915 · Improperly Controlled Modification of Dynamically-Determined Object Attributes
Published
2025-10-03T23:15Z
Affected products (1)
ProductVersionsFixed in
hcltech/dryice_myxalyticsall versions—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124411 · [email protected]
EPSS history
Timeline
  • 03 OCT 18:20Z
    HCL MyXalytics product is affected by Mass Assignment vulnerability
    cvelistv5