Skip to content
OpenAdvisories
Low · 3.3 CVE-2025-59866 EUVD-2025-210480GHSA-xrg7-hrrm-57fm

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerabi…

Published Jul 17, 2026 · Updated Jul 17, 2026 · Assigned by HCL

Description

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.

Affected products

VendorProductAffectedFixed
HCLSoftware DFMPro for CATIA v4.1 —
HCLSoftware DFXAnalytics v3.1 —
HCLSoftware DFXServer v3.1 —

References