Inclusion of Functionality from Untrusted Control Sphere in HCL MyXalytics

CVE-2025-52655

What is CVE-2025-52655?

The vulnerability in HCL MyXalytics, specifically in version 6.6, relates to the potential for loading third-party scripts without adequate integrity checks. This flaw enables external code to execute within the application's context, leading to the possible exposure of sensitive data and unauthorized access to the system. Organizations using this product should take immediate steps to mitigate risks associated with this vulnerability.

References