← Back

CVE-2025-52656

nvd nist
Published: Oct 3, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.6
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Exploitability: 2.8 / Impact: 4.7
Source: psirt@hcl.com (Secondary)

Description

HCL MyXalytics: 6.6.  is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields.

Affected (1)

Hcltech
1 product
Dryice Myxalytics
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Dryice Myxalytics
Version 6.6

Related CWEs

CWE-915
Improperly Controlled Modification of Dynamically-Determined Object Attributes
The product receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.