CVE-2025-59851
critical
CVSS v3
9.8
CVSS v2
—
VIR risk
9.8
Description
HCL DFXAnalytics is affected by a Using Components with Known Vulnerabilities flaw where the application utilizes unpatched libraries or sub-components, which could allow an attacker to identify and exploit publicly known security vulnerabilities to gain unauthorized access or compromise the application.
Predictions
Exploit likelihood
97%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@hcl.com — https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| hcltech | dfxanalytics | {"endExcluding":"4.1"} | 4.1 |
References
Verify integrity in audit chain (admin only). AS-IS.