HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header, which could allow an attacker to exploit browser-specific rendering flaws or bypass security controls that should instead be managed by a robust Content Security Policy (CSP).
References
| Link | Resource |
|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569 | Vendor Advisory |
Configurations
History
07 May 2026, 20:02
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:hcltech:dfxanalytics:*:*:*:*:*:*:*:* | |
| CWE | CWE-79 | |
| First Time |
Hcltech
Hcltech dfxanalytics |
|
| References | () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569 - Vendor Advisory |
06 May 2026, 11:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-06 11:16
Updated : 2026-05-07 20:02
NVD link : CVE-2025-59854
Mitre link : CVE-2025-59854
CVE.ORG link : CVE-2025-59854
JSON object : View
Products Affected
hcltech
- dfxanalytics