Lucene search
+L

4365 matches found

osv_cve
osv_cve
•added 2025/10/03 6:15 p.m.•19 views

CVE-2025-52653

HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorized scripts, potentially resulting in unauthorized actions or access...

5.4CVSS6AI score0.00259EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/03 6:11 p.m.•48 views

CVE-2025-52654

CVE-2025-52654 affects HCL MyXalytics v6.6 and is described as an HTML injection vulnerability caused by untrusted input being included in output without proper handling. Documented impact includes potential content injection; one source also notes possible cross-site scripting. Public remediatio...

4.6CVSS5.8AI score0.00177EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/03 6:11 p.m.•17 views

EUVD-2025-32352

A vulnerability in HCL HCL MyXalytics allows HTML InjectionThis issue affects HCL MyXalytics: 6.6...

4.6CVSS6.3AI score0.00177EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/03 6:11 p.m.•12 views

CVE-2025-52654 HCL MyXalytics is affected by an HTML Injection

HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output without proper handling, potentially allowing unauthorized content injection and manipulation...

4.6CVSS5.8AI score0.00177EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/03 6:11 p.m.•33 views

CVE-2025-52654 HCL MyXalytics is affected by an HTML Injection

HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output without proper handling, potentially allowing unauthorized content injection and manipulation...

4.6CVSS0.00177EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/03 5:59 p.m.•7 views

CVE-2025-52653 Cross Site Scripting vulnerability in the web application

HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorized scripts, potentially resulting in unauthorized actions or access...

7.6CVSS6AI score0.00259EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 5:59 p.m.•20 views

EUVD-2025-32319

HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorized scripts, potentially resulting in unauthorized actions or access...

7.6CVSS5.9AI score0.00259EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/03 5:59 p.m.•34 views

CVE-2025-52653

The CVE-2025-52653 entry concerns HCL MyXalytics web application. A Cross Site Scripting (XSS) vulnerability in the web UI is documented, enabling execution of unauthorized scripts and potentially leading to unauthorized actions or access. Affected component is the web application (MyXalytics) wi...

7.6CVSS6AI score0.00259EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/03 12:00 a.m.•22 views

PT-2025-40575

Name of the Vulnerable Software and Affected Versions HCL MyXalytics version 6.6 Description The software is affected by a flaw related to the use of vulnerable or outdated versions. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

4.8CVSS5.8AI score0.00195EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/10/03 12:00 a.m.•21 views

HCL MyXalytics 安全漏洞

HCL MyXalytics is an analytics software product from HCL India. It is used to perform data analysis and other related tasks. A security vulnerability exists in HCL MyXalytics, which stems from the vulnerability of the web application to cross-site scripting attacks, which could lead to the...

7.6CVSS6.2AI score0.00259EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/03 12:00 a.m.•19 views

PT-2025-40574

Name of the Vulnerable Software and Affected Versions HCL MyXalytics version 6.6 Description The software is susceptible to a Mass Assignment issue. This happens when user-supplied data is automatically mapped to application objects without sufficient validation or access controls, potentially...

7.6CVSS5.8AI score0.00252EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/03 12:00 a.m.•6 views

CVE-2025-52656: Improperly Controlled Modification of Dynamically-Determined Object Attributes

HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields...

7.6CVSS5.8AI score0.00252EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/03 12:00 a.m.•21 views

HCL MyXalytics 安全漏洞

HCL MyXalytics is an analytics software product from HCL India. It is used to perform data analysis and other related tasks. A security vulnerability exists in HCL MyXalytics version 6.6, which stems from a lack of proper validation and access control when automatically binding user inputs to...

7.6CVSS6.5AI score0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/03 12:00 a.m.•25 views

PT-2025-40572

Name of the Vulnerable Software and Affected Versions HCL MyXalytics affected versions not specified Description The HCL MyXalytics web application is susceptible to a Cross Site Scripting issue. This allows the execution of unauthorized scripts, which could lead to unauthorized actions or access...

7.6CVSS5.9AI score0.00259EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/03 12:00 a.m.•6 views

CVE-2025-52653: Improper Neutralization of Input During Web Page Generation

HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorized scripts, potentially resulting in unauthorized actions or access...

7.6CVSS6AI score0.00259EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/03 12:00 a.m.•20 views

HCL MyXalytics 安全漏洞

HCL MyXalytics is an analytics software product from HCL India. It is used to perform data analysis and other related tasks. A security vulnerability exists in HCL MyXalytics version 6.6, which stems from allowing HTML injection and could lead to cross-site scripting attacks...

4.6CVSS6.3AI score0.00177EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/03 12:00 a.m.•5 views

CVE-2025-52654: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output without proper handling, potentially allowing unauthorized content injection and manipulation...

4.6CVSS5.8AI score0.00177EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/03 12:00 a.m.•8 views

CVE-2025-52658: Use of Unmaintained Third Party Components

HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security risks that could be exploited...

4.8CVSS5.7AI score0.00195EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2022-24685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in...

7.5CVSS7.2AI score0.01548EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/09/05 3:22 p.m.•10 views

CVE-2025-0280

A security vulnerability in HCL Compass can allow attacker to gain unauthorized database access...

7.5CVSS7AI score0.00108EPSS
SaveExploits0References1
Rows per page
Query Builder