CVE-2025-52653: Cross Site Scripting vulnerability in the web application

Published Oct 3, 2025

Updated

HCL MyXalytics product is affected by Cross Site Scripting vulnerability in the web application. This can allow the execution of unauthorized scripts, potentially resulting in unauthorized actions or access.

Affected Software

2 affected components

HCL MyXalytics

hcltech Dryice Myxalytics=6.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade HCL MyXalytics to a version that resolves this vulnerability.
Fixed in 6.7

Event History

Oct 3, 2025

CVE Published

via MITRE·05:59 PM

Data Sourced

via MITRE·05:59 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-52653?

CVE-2025-52653 is classified as a medium severity Cross Site Scripting vulnerability.

How do I fix CVE-2025-52653?

To fix CVE-2025-52653, update your HCL MyXalytics application to the latest version that addresses this vulnerability.

What impact does CVE-2025-52653 have on HCL MyXalytics?

CVE-2025-52653 allows attackers to execute unauthorized scripts within the application, potentially leading to unauthorized actions.

Can CVE-2025-52653 lead to data breaches?

Yes, CVE-2025-52653 can facilitate data breaches by enabling attackers to execute malicious scripts that compromise sensitive information.

Is there a workaround for CVE-2025-52653?

As of now, the recommended solution for CVE-2025-52653 is to apply the available security update rather than relying on workarounds.