← CVE Intelligence

CVE-2025-59854

HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability PUBLISHED

Description (CNA)

HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header, which could allow an attacker to exploit browser-specific rendering flaws or bypass security controls that should instead be managed by a robust Content Security Policy (CSP).

Affected (CNA)

Vendor / productVersions
HCL / DFXAnalyticsaffected 3.1 and below

CWE

CWE-80

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.