CVE-2025-59852CWE-319

CVE-2025-59852

Low · published May 6, 2026

CVSS v3.1
3.7
EPSS
0%
Percentile
0.4
In the wild
Unconfirmed
What it is

HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00088 · 0.4th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-05-06T15:16Z
Affected products (1)
ProductVersionsFixed in
hcltech/dfxanalytics< 4.14.1
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569 · [email protected]
EPSS history
Timeline
  • 06 MAY 10:25Z
    HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability
    cvelistv5