7.6HIGH

CVE-2025-52653 — HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application.

Hcltech · Dryice Myxalytics · Published 3 Oct 2025 · Modified 30 Sept 2026

Description

HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorized scripts, potentially resulting in unauthorized actions or access.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124411

What to do

Check whether Dryice Myxalytics is in your asset inventory.
Patch in the next maintenance window; prioritise internet-facing systems.
Record the decision in your risk register for audit evidence.

Alert me on similar CVEs →

Link: adminadda.com/cve/CVE-2025-52653