{"id":"CVE-2025-59853","state":"PUBLISHED","title":"HCL DFXAnalytics is affected by an Improper Error Handling vulnerability","description":"HCL DFXAnalytics is affected by an Improper Error Handling vulnerability where the application exposes detailed stack traces in responses, which could allow an attacker to gain insights into the application's internal structure, code logic, and environment configurations.","publishedAt":"2026-05-06T10:26:25.727Z","updatedAt":"2026-05-06T13:02:28.490Z","severity":{"score":3.1,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","source":"HCL"},"assigner":"HCL","products":["HCL DFXAnalytics"],"affected":[{"vendor":"HCL","product":"DFXAnalytics","defaultStatus":"unaffected","versions":[{"version":"3.1 and below","status":"affected"}]}],"references":["https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569"],"weaknesses":["CWE-209"],"ingestedAt":"2026-10-29T20:09:39.787Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/59xxx/CVE-2025-59853.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-59853","state":"PUBLISHED","datePublished":"2026-05-06T10:26:25.727Z","dateUpdated":"2026-05-06T13:02:28.490Z","assignerShortName":"HCL","assignerOrgId":"1e47fe04-f25f-42fa-b674-36de2c5e3cfc","dateReserved":"2025-09-22T14:59:58.052Z"},"containers":{"cna":{"title":"HCL DFXAnalytics is affected by an Improper Error Handling vulnerability","descriptions":[{"lang":"en","value":"HCL DFXAnalytics is affected by an Improper Error Handling vulnerability where the application exposes detailed stack traces in responses, which could allow an attacker to gain insights into the application's internal structure, code logic, and environment configurations."}],"affected":[{"vendor":"HCL","product":"DFXAnalytics","defaultStatus":"unaffected","versions":[{"version":"3.1 and below","status":"affected"}]}],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"LOW","baseScore":3.1,"vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-209","lang":"en","description":"CWE-209: Generation of Error Message Containing Sensitive Information","type":"CWE"}]}],"providerMetadata":{"shortName":"HCL","orgId":"1e47fe04-f25f-42fa-b674-36de2c5e3cfc","dateUpdated":"2026-05-06T10:26:25.727Z"},"datePublic":"2026-05-06T14:30:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-06T12:29:02.256404Z","id":"CVE-2025-59853","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-06T13:02:28.490Z"}}]}}}