CVE-2025-52656: HCL MyXalytics product is affected by Mass Assignment vulnerability
Published Oct 3, 2025
·Updated
HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields.
Affected Software
2 affected components
HCL MyXalytics
hcltech Dryice Myxalytics=6.6
Event History
Oct 3, 2025
CVE Published
via MITRE·06:20 PM
Data Sourced
via MITRE·06:20 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-52656?
CVE-2025-52656 has a medium severity rating due to its potential for unauthorized access to sensitive fields.
2
How do I fix CVE-2025-52656?
To fix CVE-2025-52656, implement proper validation and access controls to prevent mass assignment vulnerabilities.
3
What products are affected by CVE-2025-52656?
CVE-2025-52656 affects HCL MyXalytics version 6.6.
4
What type of vulnerability is CVE-2025-52656?
CVE-2025-52656 is classified as a Mass Assignment vulnerability.
5
What risks are posed by CVE-2025-52656?
CVE-2025-52656 can lead to unauthorized modification of application objects, potentially compromising sensitive data.