CVE-2025-52656

HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields.

CVSS v3 7.6 HIGH

7.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124411	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:dryice_myxalytics:6.6:*:*:*:*:*:*:*

History

08 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) HCL MyXalytics: 6.6. está afectado por la vulnerabilidad de Asignación Masiva. La Asignación Masiva ocurre cuando la entrada del usuario se vincula automáticamente a objetos de la aplicación sin la validación o los controles de acceso adecuados, lo que podría permitir la modificación no autorizada de campos sensibles.

Information

Published : 2025-10-03 19:15

Updated : 2026-10-08 22:10

NVD link : CVE-2025-52656

Mitre link : CVE-2025-52656

CVE.ORG link : CVE-2025-52656

JSON object : View

Products Affected

hcltech

dryice_myxalytics

CWE

CWE-915

Improperly Controlled Modification of Dynamically-Determined Object Attributes

{"id": "CVE-2025-52656", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-52656", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-03T18:43:06.088949Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL", "product": "HCL MyXalytics", "versions": [{"status": "affected", "version": "6.6"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-03T19:15:46.637", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124411", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-915"}]}], "descriptions": [{"lang": "en", "value": "HCL MyXalytics: 6.6.\u00a0\u00a0is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields."}, {"lang": "es", "value": "HCL MyXalytics: 6.6. est\u00e1 afectado por la vulnerabilidad de Asignaci\u00f3n Masiva. La Asignaci\u00f3n Masiva ocurre cuando la entrada del usuario se vincula autom\u00e1ticamente a objetos de la aplicaci\u00f3n sin la validaci\u00f3n o los controles de acceso adecuados, lo que podr\u00eda permitir la modificaci\u00f3n no autorizada de campos sensibles."}], "lastModified": "2026-10-08T22:10:00.563", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:dryice_myxalytics:6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63206848-DCF7-4835-A58C-5F3E7F455E5C"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}