CVE-2025-59852 HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability
Attackers can intercept unencrypted network traffic to compromise the confidentiality, integrity, and authentication of sensitive data in HCL DFXAnalytics.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-59852?
CVE-2025-59852 is a low-severity vulnerability in HCL DFXAnalytics, published on 6 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information.
Weakness: CWE-319
Which versions are affected by CVE-2025-59852?
It affects 1 product.
Products include Hcltech Dfxanalytics.
How do I fix CVE-2025-59852?
No fix has been published for CVE-2025-59852 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-59852 being exploited?
There is no known exploitation of CVE-2025-59852 in the wild and no public exploit code.
Other vulnerabilities in HCL DFXAnalytics
- CVE-2026-56454 HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1.
- CVE-2026-56453 HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability.
- CVE-2026-56455 HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS).
- CVE-2026-56456 HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability.
- CVE-2025-31970 HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability
Sources
Also known as GHSA-37m6-8rw8-wh8f.