Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2025-52655

HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.

Description

Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics. v6.6 allows Loading third-party scripts without integrity checks or validation can allow external code run in the application's context, risking data exposure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL HCL MyXalytics

Default version status: unaffected

  • 6.6affected

References