CVE-2025-52652
LowCVSS 3.5Summary
HCL MyXalytics is affected by a Content Spoofing vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft.
Risk Assessment
Users may be deceived into providing sensitive data, believing they are communicating with a trusted source, potentially leading to data security breaches.
Recommendation
Implement content authentication mechanisms and educate users on recognizing phishing attempts. Apply vendor patches as well.
Other vulnerabilities in HCL MyXalytics
See all- CVE-2025-52657Low
HCL MyXalytics is affected by a potential DoS vulnerability. It allows users to input data without any restriction on the number of characters, which can impact system performance or availability.
- CVE-2025-52651Low
HCL MyXalytics is affected by an improper input validation vulnerability. It allows malicious or unexpected data to cause unintended system behavior or security issues.
- CVE-2025-59870High
HCL MyXalytics is affected by improper management of a static JWT signing secret in the web application, where the secret lacks rotation, introducing a security risk.
Original NVD description (English source)
HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft.