Skip to content
OpenAdvisories
Low · 3.1 CVE-2025-52655 EUVD-2025-33690GHSA-9mvw-pgj7-g7p4

HCL MyXalytics is affected by a Cross-Domain Script Include vulnerability.

Published Oct 10, 2025 · Updated Oct 10, 2025 · Assigned by HCL

Description

Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics. v6.6
allows Loading third-party scripts without integrity checks or validation can allow external code run in the application's context, risking data exposure.

Affected products

VendorProductAffectedFixed
HCL HCL MyXalytics 6.6 —

References