Content Spoofing Vulnerability in HCL MyXalytics
CVE-2025-52652

3.5LOW

Key Information:

Vendor
CVE Published:
7 September 2026

What is CVE-2025-52652?

HCL MyXalytics has been identified with a content spoofing vulnerability, allowing malicious actors to alter how content is presented to users. This manipulation can deceive users into believing the altered content originates from a legitimate source, thereby facilitating phishing attempts and increasing the risk of data theft. Organizations using HCL MyXalytics should review their security protocols to mitigate potential exploitation of this vulnerability.

Affected Version(s)

MyXalytics v6.6, v6.7, v6.8 and v6.8.0.1

References

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.