HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives for object-src and base-uri, which could allow an attacker to exploit injection vectors such as Cross-Site Scripting (XSS)
References
| Link | Resource |
|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569 | Vendor Advisory |
Configurations
History
07 May 2026, 19:58
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:hcltech:dfxanalytics:*:*:*:*:*:*:*:* | |
| CWE | CWE-79 | |
| First Time |
Hcltech
Hcltech dfxanalytics |
|
| References | () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569 - Vendor Advisory |
06 May 2026, 11:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-06 11:16
Updated : 2026-05-07 19:58
NVD link : CVE-2025-31970
Mitre link : CVE-2025-31970
CVE.ORG link : CVE-2025-31970
JSON object : View
Products Affected
hcltech
- dfxanalytics