CVE-2025-59852

LOW

HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability

Title source: cna

Description

HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information.

References (1)

Core 1

Core References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569

Scores

CVSS v3 3.7

EPSS 0.0001

EPSS Percentile 1.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-319

Status published

Products (2)

HCL/DFXAnalytics 3.1 and below

hcltech/dfxanalytics < 4.1

Published May 06, 2026

Tracked Since May 06, 2026