PT-2026-37440 · Hcl · Dfxanalytics

Published 2026-05-06 · Updated 2026-05-06 · CVE-2025-59852

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions HCL DFXAnalytics (affected versions not specified)

Description HCL DFXAnalytics transmits data over the network without encryption. This lack of transport layer protection could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2025-59852

Affected Products

Dfxanalytics

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-59852 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569 · Vendor Advisory
• https://t.me/cveNotify/162305 · Telegram Post
• https://t.me/CVEtracker/52849 · Telegram Post