CVE-2025-52654: HCL MyXalytics is affected by an HTML Injection
Published Oct 3, 2025
·Updated
HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output without proper handling, potentially allowing unauthorized content injection and manipulation.
Affected Software
2 affected components
HCL MyXalytics
hcltech Dryice Myxalytics=6.6
Remediation
Information
For customers using older version, mitigation path will include upgrade to version 6.7 which in turn will fix the vulnerability during upgrade process
Event History
Oct 3, 2025
CVE Published
via MITRE·06:11 PM
Data Sourced
via MITRE·06:11 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-52654?
The severity of CVE-2025-52654 is considered medium due to the potential for HTML injection.
2
How do I fix CVE-2025-52654?
To fix CVE-2025-52654, ensure that HCL MyXalytics is updated to the latest version with security patches.
3
What impact does CVE-2025-52654 have on HCL MyXalytics users?
CVE-2025-52654 may allow attackers to inject malicious HTML, leading to possible phishing or data theft.
4
Is CVE-2025-52654 specific to certain versions of HCL MyXalytics?
Yes, CVE-2025-52654 specifically affects HCL MyXalytics version 6.6.
5
Can CVE-2025-52654 be exploited remotely?
CVE-2025-52654 can potentially be exploited remotely, making it critical for users to apply the necessary updates.