Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-31970 EUVD-2025-209659GHSA-wwg7-35h6-45wq

HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability

Published May 6, 2026 · Updated May 7, 2026 · Assigned by HCL

Description

HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives for object-src and base-uri, which could allow an attacker to exploit injection vectors such as Cross-Site Scripting (XSS)

Affected products

VendorProductAffectedFixed
HCL DFXAnalytics 3.1 and below —

References