Vulnerability · Published Sep 7, 2026 · Assigned by HCL
CVE-2025-52652HCL MyXalytics is affected by multiple security vulnerabilities.
Low 3.5
In plain English
A low-severity security flaw in MyXalytics from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).
Severity (CVSS 3.1)3.5Low
Exploit odds (30 days)0.2%top 83.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL Software | MyXalytics | v6.6, v6.7, v6.8 and v6.8.0.1 |
Weakness: CWE-451 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N