VULNERABILITY INTELLIGENCE
CVE-2025-52656
CVSS score7.6 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2025-10-03
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Description
HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields.
Weakness classification
- psirt@hcl.com: CWE-915
Primary references
- psirt@hcl.com — Vendor Advisory