CVE-2025-52656
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-03

Last updated on: 2025-10-08

Assigner: HCL Software

Description
HCL MyXalytics: 6.6.  is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-03
Last Modified
2025-10-08
Generated
2026-06-16
AI Q&A
2025-10-03
EPSS Evaluated
2026-06-14
NVD
CVE-2025-52656
EUVD
EUVD-2025-32455
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
hcltech dryice_myxalytics 6.6
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-915 The product receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a Mass Assignment issue in HCL MyXalytics 6.6. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, which can allow unauthorized users to modify sensitive fields within the application.

Impact Analysis

The vulnerability can allow attackers to modify sensitive data or application fields without authorization, potentially leading to data integrity issues, unauthorized changes, and limited availability impact.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-52656. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart