{"schema_version":1,"title":"HCL Software DFXAnalytics vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in HCL Software DFXAnalytics: 0 in the last 7 days and 10 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2025-59866, was published on 17 July 2026.","url":"https://junglewise.ai/threats/technologies/dfxanalytics","json_url":"https://junglewise.ai/threats/technologies/dfxanalytics.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/dfxanalytics","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":10,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":10,"last_365_days":10},"latest":[{"cve":"CVE-2025-59866","cvss":3.3,"slug":"cve-2025-59866-hcl-dfmpro-and-dfx-installers-privilege-escalation-via-insecure","title":"HCL DFMPro and DFX installers privilege escalation via insecure file permissions","severity":"low","exploited":false,"published_at":"2026-07-17T18:17:12.643+00:00","url":"https://junglewise.ai/threats/cve-2025-59866-hcl-dfmpro-and-dfx-installers-privilege-escalation-via-insecure"},{"cve":"CVE-2026-56456","cvss":5.3,"slug":"cve-2026-56456-hcl-dfxanalytics-internal-file-path-disclosure-in-dashboard","title":"HCL DFXAnalytics internal file path disclosure in dashboard","severity":"medium","exploited":false,"published_at":"2026-07-16T14:16:54.943+00:00","url":"https://junglewise.ai/threats/cve-2026-56456-hcl-dfxanalytics-internal-file-path-disclosure-in-dashboard"},{"cve":"CVE-2026-56455","cvss":5.3,"slug":"cve-2026-56455-hcl-dfxanalytics-buffer-overflow-in-memory-container","title":"HCL DFXAnalytics buffer overflow in memory container","severity":"medium","exploited":false,"published_at":"2026-07-16T14:16:54.797+00:00","url":"https://junglewise.ai/threats/cve-2026-56455-hcl-dfxanalytics-buffer-overflow-in-memory-container"},{"cve":"CVE-2026-56454","cvss":5.9,"slug":"cve-2026-56454-hcl-dfxanalytics-use-of-deprecated-tls-1-0-and-1-1-protocols","title":"HCL DFXAnalytics use of deprecated TLS 1.0 and 1.1 protocols","severity":"medium","exploited":false,"published_at":"2026-07-16T14:16:54.643+00:00","url":"https://junglewise.ai/threats/cve-2026-56454-hcl-dfxanalytics-use-of-deprecated-tls-1-0-and-1-1-protocols"},{"cve":"CVE-2026-56453","cvss":5.5,"slug":"cve-2026-56453-hcl-dfxanalytics-account-takeover-via-response-manipulation","title":"HCL DFXAnalytics account takeover via response manipulation","severity":"medium","exploited":false,"published_at":"2026-07-16T14:16:54.497+00:00","url":"https://junglewise.ai/threats/cve-2026-56453-hcl-dfxanalytics-account-takeover-via-response-manipulation"},{"cve":"CVE-2026-35145","cvss":3.1,"slug":"cve-2026-35145-hcl-dfxanalytics-missing-hsts-header","title":"HCL DFXAnalytics missing HSTS header","severity":"low","exploited":false,"published_at":"2026-07-16T14:16:51.123+00:00","url":"https://junglewise.ai/threats/cve-2026-35145-hcl-dfxanalytics-missing-hsts-header"},{"cve":"CVE-2026-35143","cvss":3,"slug":"cve-2026-35143-hcl-dfxanalytics-missing-samesite-attribute-in-session-cookies","title":"HCL DFXAnalytics missing SameSite attribute in session cookies","severity":"low","exploited":false,"published_at":"2026-07-16T14:16:50.973+00:00","url":"https://junglewise.ai/threats/cve-2026-35143-hcl-dfxanalytics-missing-samesite-attribute-in-session-cookies"},{"cve":"CVE-2026-35142","cvss":2.6,"slug":"cve-2026-35142-hcl-dfxanalytics-internal-ip-address-disclosure","title":"HCL DFXAnalytics internal IP address disclosure","severity":"low","exploited":false,"published_at":"2026-07-16T14:16:50.863+00:00","url":"https://junglewise.ai/threats/cve-2026-35142-hcl-dfxanalytics-internal-ip-address-disclosure"},{"cve":"CVE-2026-35141","cvss":2.6,"slug":"cve-2026-35141-hcl-dfxanalytics-login-replay-attack-vulnerability","title":"HCL DFXAnalytics login replay attack vulnerability","severity":"low","exploited":false,"published_at":"2026-07-16T14:16:50.747+00:00","url":"https://junglewise.ai/threats/cve-2026-35141-hcl-dfxanalytics-login-replay-attack-vulnerability"},{"cve":"CVE-2026-35140","cvss":3,"slug":"cve-2026-35140-hcl-dfxanalytics-missing-secure-attribute-in-session-cookies","title":"HCL DFXAnalytics missing secure attribute in session cookies","severity":"low","exploited":false,"published_at":"2026-07-16T14:16:50.633+00:00","url":"https://junglewise.ai/threats/cve-2026-35140-hcl-dfxanalytics-missing-secure-attribute-in-session-cookies"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":10},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"HCL Software Aftermarket EPC","slug":"aftermarket-epc","vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/aftermarket-epc"},{"name":"HCL Software MyCloud","slug":"mycloud","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/mycloud"},{"name":"HCL Software DFXServer","slug":"dfxserver","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/dfxserver"},{"name":"HCL Software DevOps Deploy","slug":"devops-deploy","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/devops-deploy"},{"name":"HCL Software DevOps Launch","slug":"devops-launch","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/devops-launch"},{"name":"HCL Software IntelliOps Event Management","slug":"intelliops-event-management","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/intelliops-event-management"},{"name":"HCL Software Traveler for Microsoft Outlook","slug":"traveler-for-microsoft-outlook","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/traveler-for-microsoft-outlook"}],"technology":{"hub":true,"name":"HCL Software DFXAnalytics","slug":"dfxanalytics","vendor":{"name":"HCL Software","slug":"hcl-software","url":"https://junglewise.ai/threats/vendors/hcl-software"},"aliases":[],"category":"software","homepage":"https://dfmpro.com/dfx-analytics/","description":"A data analytics and visualization tool for manufacturing and engineering processes.","url":"https://junglewise.ai/threats/technologies/dfxanalytics"},"most_severe":[{"cve":"CVE-2026-56454","cvss":5.9,"slug":"cve-2026-56454-hcl-dfxanalytics-use-of-deprecated-tls-1-0-and-1-1-protocols","title":"HCL DFXAnalytics use of deprecated TLS 1.0 and 1.1 protocols","severity":"medium","exploited":false,"published_at":"2026-07-16T14:16:54.643+00:00","url":"https://junglewise.ai/threats/cve-2026-56454-hcl-dfxanalytics-use-of-deprecated-tls-1-0-and-1-1-protocols"},{"cve":"CVE-2026-56453","cvss":5.5,"slug":"cve-2026-56453-hcl-dfxanalytics-account-takeover-via-response-manipulation","title":"HCL DFXAnalytics account takeover via response manipulation","severity":"medium","exploited":false,"published_at":"2026-07-16T14:16:54.497+00:00","url":"https://junglewise.ai/threats/cve-2026-56453-hcl-dfxanalytics-account-takeover-via-response-manipulation"},{"cve":"CVE-2026-56456","cvss":5.3,"slug":"cve-2026-56456-hcl-dfxanalytics-internal-file-path-disclosure-in-dashboard","title":"HCL DFXAnalytics internal file path disclosure in dashboard","severity":"medium","exploited":false,"published_at":"2026-07-16T14:16:54.943+00:00","url":"https://junglewise.ai/threats/cve-2026-56456-hcl-dfxanalytics-internal-file-path-disclosure-in-dashboard"},{"cve":"CVE-2026-56455","cvss":5.3,"slug":"cve-2026-56455-hcl-dfxanalytics-buffer-overflow-in-memory-container","title":"HCL DFXAnalytics buffer overflow in memory container","severity":"medium","exploited":false,"published_at":"2026-07-16T14:16:54.797+00:00","url":"https://junglewise.ai/threats/cve-2026-56455-hcl-dfxanalytics-buffer-overflow-in-memory-container"},{"cve":"CVE-2025-59866","cvss":3.3,"slug":"cve-2025-59866-hcl-dfmpro-and-dfx-installers-privilege-escalation-via-insecure","title":"HCL DFMPro and DFX installers privilege escalation via insecure file permissions","severity":"low","exploited":false,"published_at":"2026-07-17T18:17:12.643+00:00","url":"https://junglewise.ai/threats/cve-2025-59866-hcl-dfmpro-and-dfx-installers-privilege-escalation-via-insecure"},{"cve":"CVE-2026-35145","cvss":3.1,"slug":"cve-2026-35145-hcl-dfxanalytics-missing-hsts-header","title":"HCL DFXAnalytics missing HSTS header","severity":"low","exploited":false,"published_at":"2026-07-16T14:16:51.123+00:00","url":"https://junglewise.ai/threats/cve-2026-35145-hcl-dfxanalytics-missing-hsts-header"},{"cve":"CVE-2026-35143","cvss":3,"slug":"cve-2026-35143-hcl-dfxanalytics-missing-samesite-attribute-in-session-cookies","title":"HCL DFXAnalytics missing SameSite attribute in session cookies","severity":"low","exploited":false,"published_at":"2026-07-16T14:16:50.973+00:00","url":"https://junglewise.ai/threats/cve-2026-35143-hcl-dfxanalytics-missing-samesite-attribute-in-session-cookies"},{"cve":"CVE-2026-35140","cvss":3,"slug":"cve-2026-35140-hcl-dfxanalytics-missing-secure-attribute-in-session-cookies","title":"HCL DFXAnalytics missing secure attribute in session cookies","severity":"low","exploited":false,"published_at":"2026-07-16T14:16:50.633+00:00","url":"https://junglewise.ai/threats/cve-2026-35140-hcl-dfxanalytics-missing-secure-attribute-in-session-cookies"},{"cve":"CVE-2026-35142","cvss":2.6,"slug":"cve-2026-35142-hcl-dfxanalytics-internal-ip-address-disclosure","title":"HCL DFXAnalytics internal IP address disclosure","severity":"low","exploited":false,"published_at":"2026-07-16T14:16:50.863+00:00","url":"https://junglewise.ai/threats/cve-2026-35142-hcl-dfxanalytics-internal-ip-address-disclosure"},{"cve":"CVE-2026-35141","cvss":2.6,"slug":"cve-2026-35141-hcl-dfxanalytics-login-replay-attack-vulnerability","title":"HCL DFXAnalytics login replay attack vulnerability","severity":"low","exploited":false,"published_at":"2026-07-16T14:16:50.747+00:00","url":"https://junglewise.ai/threats/cve-2026-35141-hcl-dfxanalytics-login-replay-attack-vulnerability"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}