CVE-2025-52657

HCL MyXalytics was affected by Potential DOS Vulnerability. It allows users to input data without any restriction on the number of characters which can impact system performance or availability.

Scoring

Severity

LOW

CVSS base score

3.5

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

EPSS probability

0.16%

CWE

CWE-770

Published

2026-09-07

Last modified

2026-09-08

Affected products

• HCL Software MyXalytics

Weakness type

• CWE-770

Related vulnerabilities

• CVE-2023-54394 — PocketMine-MP before 4.18.0-ALPHA2 Bandwidth Amplification via InventoryTransactionPacket
• CVE-2026-53937 — MCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)
• CVE-2026-86075 — n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint
• CVE-2026-57099 — ASP.NET Core Denial of Service Vulnerability
• CVE-2026-69374 — Windows SMB Server Denial of Service Vulnerability
• CVE-2026-72978 — Active Directory Federation Services (AD FS) Denial of Service Vulnerability
• CVE-2026-82075 — Uncontrolled Resource Consumption in MongoDB Sharded Cluster Router Allows Unauthenticated Denial of Service
• CVE-2026-82054 — Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service

Markdown version · Browse all CVEs