How severe is CVE-2025-52658?

CVE-2025-52658 has a CVSS 3.x base score of 3.5, rated low severity. It is exploitable over network with low attack complexity, requires high privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.

Is CVE-2025-52658 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (8th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-52658?

CVE-2025-52658 affects Hcltech Dryice Myxalytics. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-52658?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-52658 have an EU (EUVD) identifier?

Yes. CVE-2025-52658 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-32449.

When was CVE-2025-52658 published?

CVE-2025-52658 was published on 2025-10-03 and last updated on 2026-06-17.

CVE-2025-52658

CVE-2025-52658 is a low-severity vulnerability in Hcltech Dryice Myxalytics with a CVSS 3.x base score of 3.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-1104.

Key facts

Severity: Low (CVSS 3.x base score 3.5)
EPSS exploit prediction: 0% (8th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-32449
Weakness: CWE-1104
Affected product: Hcltech Dryice Myxalytics
Published: 2025-10-03
Last modified: 2026-06-17

Description

HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security risks that could be exploited.

Frequently asked questions

What is CVE-2025-52658?: HCL MyXalytics is affected by the use of vulnerable/outdated versions which can expose the application to known security risks that could be exploited.
How severe is CVE-2025-52658?: CVE-2025-52658 has a CVSS 3.x base score of 3.5, rated low severity. It is exploitable over network with low attack complexity, requires high privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.
Is CVE-2025-52658 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (8th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-52658?: CVE-2025-52658 affects Hcltech Dryice Myxalytics. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-52658?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-52658 have an EU (EUVD) identifier?: Yes. CVE-2025-52658 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-32449.
When was CVE-2025-52658 published?: CVE-2025-52658 was published on 2025-10-03 and last updated on 2026-06-17.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124411

Affected products (1)

cpe:2.3:a:hcltech:dryice_myxalytics:6.6:*:*:*:*:*:*:*

More vulnerabilities in Hcltech Dryice Myxalytics

CVE-2024-42168 — High (CVSS 8.9): HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability. An attacker can deploy a web server that…
CVE-2023-45722 — High (CVSS 8.8): HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to…
CVE-2023-50343 — High (CVSS 8.3): HCL DRYiCE MyXalytics is impacted by an Improper Access Control (Controller APIs) vulnerability. Certain API endpoints…
CVE-2023-45724 — High (CVSS 8.2): HCL DRYiCE MyXalytics product is impacted by unauthenticated file upload vulnerability. The web application permits the…
CVE-2023-50351 — High (CVSS 8.2): HCL DRYiCE MyXalytics is impacted by the use of an insecure key rotation mechanism which can allow an attacker to…
CVE-2023-50350 — High (CVSS 8.2): HCL DRYiCE MyXalytics is impacted by the use of a broken cryptographic algorithm for encryption, potentially giving an…

All CVEs affecting Hcltech Dryice Myxalytics →

Other CWE-1104 vulnerabilities

CVE-2025-12104 — Critical (CVSS 9.8): Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through…
CVE-2025-34192 — Critical (CVSS 9.8): Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.893 and Application versions prior…
CVE-2025-10220 — Critical (CVSS 9.8): Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft Axxon One VMS…
CVE-2023-7102 — Critical (CVSS 9.8): Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed…
CVE-2024-11999 — High (CVSS 8.8): CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the…
CVE-2022-46871 — High (CVSS 8.8): An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. This vulnerability…

Browse all CWE-1104 vulnerabilities →