by Kastro
Paper/Archive/CVE-2025-59852

CVE-2025-59852

HCL DFXAnalytics — HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability

EPSS 0.1%CVSS 9.1
critical.is priorityof 100
27
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 0.4.004 × 200.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information.

Affected

ProductAffectedFixed inSource
DFXAnalytics3.1 and below–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
HCL (CNA)3.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsupport.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569