What’s Vulnerable › Vulnerabilities

CVE-2025-52656: HCL MyXalytics product is affected by Mass Assignment vulnerability

• Severity: high (CVSS 7.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-03 · updated 2026-10-08
• Weakness: CWE-915

Description

HCL MyXalytics: 6.6.  is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields.

Affected products

• HCL Software DRYiCE MyXalytics: 6.6

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124411

Get alerted when CVE-2025-52656 or the next vulnerability affects your stack