Skip to main content

Dryice Myxalytics CVE-2025-52658

| EUVDEUVD-2025-32449 LOW
Use of Unmaintained Third Party Components (CWE-1104)
2025-10-03 psirt@hcl.com
Information Disclosure Dryice Myxalytics Hcltech
3.5
CVSS 3.1 · NVD

Severity by source

NVD PRIMARY
3.5 LOW
AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

3
EUVD ID Assigned
Mar 13, 2026 - 19:29 euvd
EUVD-2025-32449
Analysis Generated
Mar 13, 2026 - 19:29 vuln.today
CVE Published
Oct 03, 2025 - 19:15 nvd
LOW 3.5

DescriptionCVE.org

HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security risks that could be exploited.

AnalysisAI

A security vulnerability in HCL MyXalytics (CVSS 3.5). Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor. Affects HCL MyXalytics.

RemediationAI

Monitor vendor channels for patch availability.

More in Dryice Myxalytics

View all
CVE-2023-45722 HIGH
8.8 Jan 03

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to

CVE-2023-50343 HIGH
8.3 Jan 03

HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Rated high severity (CV
CVE-2023-45724 HIGH
8.2 Jan 03

HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability. Rated high severity (CVSS 8.2),

CVE-2023-50351 HIGH
8.2 Jan 03

HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to compro
CVE-2023-50350 HIGH
8.2 Jan 03

HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an a
CVE-2025-52656 HIGH
7.6 Oct 03

HCL MyXalytics: 6.6.  is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatica
CVE-2023-45723 HIGH
7.6 Jan 03

HCL DRYiCE MyXalytics is impacted by path traversal vulnerability which allows file upload capability. Rated high severi
CVE-2023-50341 HIGH
7.6 Jan 03

HCL DRYiCE MyXalytics is impacted by Improper Access Control (Obsolete web pages) vulnerability. Rated high severity (CV
CVE-2025-52653 HIGH
7.6 Oct 03

HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the exec
CVE-2023-50342 HIGH
7.1 Jan 03

HCL DRYiCE MyXalytics is impacted by an Insecure Direct Object Reference (IDOR) vulnerability. Rated high severity (CVSS
CVE-2023-50344 MEDIUM
5.4 Jan 03

HCL DRYiCE MyXalytics is impacted by improper access control (Unauthenticated File Download) vulnerability. Rated medium
CVE-2025-52654 MEDIUM
4.6 Oct 03

HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output w

Same weakness CWE-1104 – Use of Unmaintained Third Party Components

View all
CVE-2023-7102 CRITICAL POC
9.8
CVE-2025-34192 CRITICAL POC
9.3
CVE-2026-41468 CRITICAL POC
9.3
CVE-2026-16634 CRITICAL
9.8
CVE-2026-3031 CRITICAL
9.8
CVE-2026-60368 HIGH
8.8
CVE-2022-46871 HIGH
8.8
CVE-2025-3497 HIGH
8.7

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2025-52658 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy