What is the CVSS score of CVE-2025-59870?

CVE-2025-59870 has a CVSS 3.1 base score of 7.4 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N. EPSS exploitation probability: 0.0%.

Which versions of Myxalytics are affected by CVE-2025-59870?

Organizations using HCL MyXalytics face moderate risk from CVE-2025-59870 rated CVSS 7.4. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-59870?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Myxalytics CVE-2025-59870

HIGH

Reusing a Nonce, Key Pair in Encryption (CWE-323)

2026-01-16 psirt@hcl.com

Information Disclosure Myxalytics

7.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 16, 2026 - 11:16 nvd

HIGH 7.4

DescriptionCVE.org

HCL MyXalytics is affected by improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk

AnalysisAI

HCL MyXalytics is affected by improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk [CVSS 7.4 HIGH]

Technical ContextAI

Affects Myxalytics. HCL MyXalytics is affected by improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk