CVE-2025-52654

{"id": "CVE-2025-52654", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-52654", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-03T18:53:45.456428Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.1}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL Software", "product": "HCL MyXalytics", "versions": [{"status": "affected", "version": "6.6"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-03T19:15:46.487", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124411", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-80"}]}], "descriptions": [{"lang": "en", "value": "HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output without proper handling, potentially allowing unauthorized content injection and manipulation."}, {"lang": "es", "value": "HCL MyXalytics v6.6 est\u00e1 afectado por una inyecci\u00f3n HTML. Este problema ocurre cuando la entrada no confiable se incluye en la salida sin el manejo adecuado, lo que podr\u00eda permitir la inyecci\u00f3n y manipulaci\u00f3n de contenido no autorizado."}], "lastModified": "2026-10-08T22:10:00.563", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:dryice_myxalytics:6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63206848-DCF7-4835-A58C-5F3E7F455E5C"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}