CVE-2025-59852 - Vulnerability Details - OpenCVE

HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Hcl	Dfxanalytics
Hcltech	Dfxanalytics

Configuration 1 [-]

cpe:2.3:a:hcltech:dfxanalytics:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.spirityenterprise.com/virtual-ciso
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569

History

Thu, 07 May 2026 21:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Hcl Hcl dfxanalytics
Vendors & Products		Hcl Hcl dfxanalytics

Thu, 07 May 2026 20:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Hcltech Hcltech dfxanalytics
CPEs		cpe:2.3:a:hcltech:dfxanalytics::::::::
Vendors & Products		Hcltech Hcltech dfxanalytics

Wed, 06 May 2026 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 06 May 2026 10:45:00 +0000

Type	Values Removed	Values Added
Description		HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information.
Title		HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability
Weaknesses		CWE-319
References		https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569
Metrics		cvssV3_1 `{'score': 3.7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: HCL

Published: 2026-05-06T10:25:29.564Z

Updated: 2026-05-06T13:22:27.255Z

Reserved: 2025-09-22T14:59:58.052Z

Link: CVE-2025-59852

Vulnrichment

Updated: 2026-05-06T13:21:40.490Z

NVD

Status : Analyzed

Published: 2026-05-06T11:16:04.560

Modified: 2026-05-07T20:03:28.500

Link: CVE-2025-59852

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-59852", "assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "state": "PUBLISHED", "assignerShortName": "HCL", "dateReserved": "2025-09-22T14:59:58.052Z", "datePublished": "2026-05-06T10:25:29.564Z", "dateUpdated": "2026-05-06T13:22:27.255Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL", "dateUpdated": "2026-05-06T10:25:29.564Z"}, "title": "HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-319", "description": "CWE-319: Cleartext Transmission of Sensitive Information", "type": "CWE"}]}], "affected": [{"vendor": "HCL", "product": "DFXAnalytics", "versions": [{"status": "affected", "version": "3.1 and below"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information."}]}], "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "LOW", "baseScore": 3.7, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"}}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-06T13:04:58.670538Z", "id": "CVE-2025-59852", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-06T13:22:27.255Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-59852", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-06T13:04:58.670538Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-06T13:21:40.490Z"}}], "cna": {"title": "HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "HCL", "product": "DFXAnalytics", "versions": [{"status": "affected", "version": "3.1 and below"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569"}], "x_generator": {"engine": "Vulnogram 1.0.0"}, "descriptions": [{"lang": "en", "value": "HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information.", "supportingMedia": [{"type": "text/html", "value": "HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-319", "description": "CWE-319: Cleartext Transmission of Sensitive Information"}]}], "providerMetadata": {"orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL", "dateUpdated": "2026-05-06T10:25:29.564Z"}}}, "cveMetadata": {"cveId": "CVE-2025-59852", "state": "PUBLISHED", "dateUpdated": "2026-05-06T13:22:27.255Z", "dateReserved": "2025-09-22T14:59:58.052Z", "assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "datePublished": "2026-05-06T10:25:29.564Z", "assignerShortName": "HCL"}, "dataVersion": "5.2"}