Cloudanix VulnDB

CVE-2025-59854

Low · 3.1

CVSS

3.1

EPSS

0.1%

Published

May 6, 2026

CISA due date

—

The record

HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header, which could allow an attacker to exploit browser-specific rendering flaws or bypass security controls that should instead be managed by a robust Content Security Policy (CSP).

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities