Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2025-59866

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-adm

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware DFMPro for CATIA

Default version status: unaffected

  • v4.1affected

HCLSoftware DFXAnalytics

Default version status: unaffected

  • v3.1affected

HCLSoftware DFXServer

Default version status: unaffected

  • v3.1affected

References