CVE-2025-52653
Cross Site Scripting vulnerability in the web application
- State
- Published
- Severity
- 7.6 High
- Published
- Oct 3, 2025
- Updated
- Oct 3, 2025
- Reserved
- Jun 18, 2025
Description
HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorized scripts, potentially resulting in unauthorized actions or access.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.6 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H | HCL |
Weaknesses
- CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
Affected Products
| Product | Versions |
|---|---|
HCL MyXalyticsHCL |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.