CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-31970

HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives for object-src and base-uri, which could allow an attacker to exploit injection vectors such as Cross-Site Scripting (XSS)

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 4.5%

CVSS Severity

CVSS v3 Score 5.3

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130569

Products affected by CVE-2025-31970

Hcltech » Dfxanalytics » Version: 2.6.0

cpe:2.3:a:hcltech:dfxanalytics:2.6.0
Hcltech » Dfxanalytics » Version: 2.6.1

cpe:2.3:a:hcltech:dfxanalytics:2.6.1
Hcltech » Dfxanalytics » Version: 2.7.0

cpe:2.3:a:hcltech:dfxanalytics:2.7.0
Hcltech » Dfxanalytics » Version: 2.8.0

cpe:2.3:a:hcltech:dfxanalytics:2.8.0
Hcltech » Dfxanalytics » Version: 2.8.1

cpe:2.3:a:hcltech:dfxanalytics:2.8.1
Hcltech » Dfxanalytics » Version: 2.8.2

cpe:2.3:a:hcltech:dfxanalytics:2.8.2
Hcltech » Dfxanalytics » Version: 2.9

cpe:2.3:a:hcltech:dfxanalytics:2.9
Hcltech » Dfxanalytics » Version: 2.9.0

cpe:2.3:a:hcltech:dfxanalytics:2.9.0
Hcltech » Dfxanalytics » Version: 2.9.1

cpe:2.3:a:hcltech:dfxanalytics:2.9.1
Hcltech » Dfxanalytics » Version: 3.0

cpe:2.3:a:hcltech:dfxanalytics:3.0
Hcltech » Dfxanalytics » Version: 3.1

cpe:2.3:a:hcltech:dfxanalytics:3.1
Hcltech » Dfxanalytics » Version: 3.1.0

cpe:2.3:a:hcltech:dfxanalytics:3.1.0
Hcltech » Dfxanalytics » Version: 3.2

cpe:2.3:a:hcltech:dfxanalytics:3.2
Hcltech » Dfxanalytics » Version: 4.0

cpe:2.3:a:hcltech:dfxanalytics:4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-31970

Products

Pricing

Contact Us