CVE-2025-52652

LowCVSS 3.5/10Last modified Oct 19, 2026

Description

HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-451

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
HCL Software	MyXalytics	v6.6, v6.7, v6.8 and v6.8.0.1

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132828

Timeline

Published: Sep 7, 2026
Last modified: Oct 19, 2026
NVD status: Undergoing Analysis

Related CVEs from 2025

CVE-2025-526535.4HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorize CVE-2025-526544.6HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output without proper handli CVE-2025-526553.1Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics. v6.6 allows Loading third-party scripts without in CVE-2025-526567.6HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to applica CVE-2025-526573.5HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of character CVE-2025-526584.8HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security risks that could be CVE-2025-526597.5HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability. This may lead to unintended storage of sensitive or dynamic conte CVE-2025-52664.3Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks. This vuln CVE-2025-526609.8HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthori CVE-2025-526615.3HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse, potentially resulti CVE-2025-526626.1A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***. This issue may have allowed Nuxt auth token extraction via XSS under CVE-2025-526637.3A vulnerability was identified in certain UniFi Talk devices where internal debugging functionality remained unintentionally enabled. This i