CVE-2025-52655 — HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.
Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics. v6.6 allows Loading third-party scripts without integrity checks or validation can allo…
Published: 2025-10-10 · CVSS: 3.1 · CVSS 3.1
Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics. v6.6 allows Loading third-party scripts without integrity checks or validation can allow external code run in the application's context, risking data exposure.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7