PT-2025-40573 · Hcl · Hcl Myxalytics

CVE-2025-52654 · Published 2025-10-03 · Updated 2025-10-08

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HCL MyXalytics version 6.6

Description A flaw exists in HCL MyXalytics that permits HTML injection. This could potentially allow an attacker to inject malicious HTML code into the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-80

Related Identifiers

CVE-2025-52654

Affected Products

Hcl Myxalytics

References · 5

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124411 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-52654 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52654 · Security Note
• https://t.me/cveNotify/137848 · Telegram Post
• https://twitter.com/CVEnew/status/1974177833191707019 · Twitter Post