# HCL Software DFXAnalytics vulnerabilities Source: https://junglewise.ai/threats/technologies/dfxanalytics Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/dfxanalytics.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 10 vulnerabilities in HCL Software DFXAnalytics: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2025-59866, was published on 17 July 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 10 (0 critical, 0 exploited in the wild) ## About HCL Software DFXAnalytics DFXAnalytics is an enterprise analytics software by HCL Software for data analysis and insights. ## Latest HCL Software DFXAnalytics vulnerabilities - [CVE-2025-59866: HCL DFMPro and DFX installers privilege escalation via insecure file permissions](https://junglewise.ai/threats/cve-2025-59866-hcl-dfmpro-and-dfx-installers-privilege-escalation-via-insecure) (low, CVSS 3.3, published 17 Jul 2026) - [CVE-2026-56456: HCL DFXAnalytics internal file path disclosure in dashboard](https://junglewise.ai/threats/cve-2026-56456-hcl-dfxanalytics-internal-file-path-disclosure-in-dashboard) (medium, CVSS 5.3, published 16 Jul 2026) - [CVE-2026-56455: HCL DFXAnalytics buffer overflow in memory container](https://junglewise.ai/threats/cve-2026-56455-hcl-dfxanalytics-buffer-overflow-in-memory-container) (medium, CVSS 5.3, published 16 Jul 2026) - [CVE-2026-56454: HCL DFXAnalytics use of deprecated TLS 1.0 and 1.1 protocols](https://junglewise.ai/threats/cve-2026-56454-hcl-dfxanalytics-use-of-deprecated-tls-1-0-and-1-1-protocols) (medium, CVSS 5.9, published 16 Jul 2026) - [CVE-2026-56453: HCL DFXAnalytics account takeover via response manipulation](https://junglewise.ai/threats/cve-2026-56453-hcl-dfxanalytics-account-takeover-via-response-manipulation) (medium, CVSS 5.5, published 16 Jul 2026) - [CVE-2026-35145: HCL DFXAnalytics missing HSTS header](https://junglewise.ai/threats/cve-2026-35145-hcl-dfxanalytics-missing-hsts-header) (low, CVSS 3.1, published 16 Jul 2026) - [CVE-2026-35143: HCL DFXAnalytics missing SameSite attribute in session cookies](https://junglewise.ai/threats/cve-2026-35143-hcl-dfxanalytics-missing-samesite-attribute-in-session-cookies) (low, CVSS 3, published 16 Jul 2026) - [CVE-2026-35142: HCL DFXAnalytics internal IP address disclosure](https://junglewise.ai/threats/cve-2026-35142-hcl-dfxanalytics-internal-ip-address-disclosure) (low, CVSS 2.6, published 16 Jul 2026) - [CVE-2026-35141: HCL DFXAnalytics login replay attack vulnerability](https://junglewise.ai/threats/cve-2026-35141-hcl-dfxanalytics-login-replay-attack-vulnerability) (low, CVSS 2.6, published 16 Jul 2026) - [CVE-2026-35140: HCL DFXAnalytics missing secure attribute in session cookies](https://junglewise.ai/threats/cve-2026-35140-hcl-dfxanalytics-missing-secure-attribute-in-session-cookies) (low, CVSS 3, published 16 Jul 2026) ## Most severe HCL Software DFXAnalytics vulnerabilities - [CVE-2026-56454: HCL DFXAnalytics use of deprecated TLS 1.0 and 1.1 protocols](https://junglewise.ai/threats/cve-2026-56454-hcl-dfxanalytics-use-of-deprecated-tls-1-0-and-1-1-protocols) (medium, CVSS 5.9, published 16 Jul 2026) - [CVE-2026-56453: HCL DFXAnalytics account takeover via response manipulation](https://junglewise.ai/threats/cve-2026-56453-hcl-dfxanalytics-account-takeover-via-response-manipulation) (medium, CVSS 5.5, published 16 Jul 2026) - [CVE-2026-56456: HCL DFXAnalytics internal file path disclosure in dashboard](https://junglewise.ai/threats/cve-2026-56456-hcl-dfxanalytics-internal-file-path-disclosure-in-dashboard) (medium, CVSS 5.3, published 16 Jul 2026) - [CVE-2026-56455: HCL DFXAnalytics buffer overflow in memory container](https://junglewise.ai/threats/cve-2026-56455-hcl-dfxanalytics-buffer-overflow-in-memory-container) (medium, CVSS 5.3, published 16 Jul 2026) - [CVE-2025-59866: HCL DFMPro and DFX installers privilege escalation via insecure file permissions](https://junglewise.ai/threats/cve-2025-59866-hcl-dfmpro-and-dfx-installers-privilege-escalation-via-insecure) (low, CVSS 3.3, published 17 Jul 2026) - [CVE-2026-35145: HCL DFXAnalytics missing HSTS header](https://junglewise.ai/threats/cve-2026-35145-hcl-dfxanalytics-missing-hsts-header) (low, CVSS 3.1, published 16 Jul 2026) - [CVE-2026-35143: HCL DFXAnalytics missing SameSite attribute in session cookies](https://junglewise.ai/threats/cve-2026-35143-hcl-dfxanalytics-missing-samesite-attribute-in-session-cookies) (low, CVSS 3, published 16 Jul 2026) - [CVE-2026-35140: HCL DFXAnalytics missing secure attribute in session cookies](https://junglewise.ai/threats/cve-2026-35140-hcl-dfxanalytics-missing-secure-attribute-in-session-cookies) (low, CVSS 3, published 16 Jul 2026) - [CVE-2026-35142: HCL DFXAnalytics internal IP address disclosure](https://junglewise.ai/threats/cve-2026-35142-hcl-dfxanalytics-internal-ip-address-disclosure) (low, CVSS 2.6, published 16 Jul 2026) - [CVE-2026-35141: HCL DFXAnalytics login replay attack vulnerability](https://junglewise.ai/threats/cve-2026-35141-hcl-dfxanalytics-login-replay-attack-vulnerability) (low, CVSS 2.6, published 16 Jul 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other HCL Software technologies - [HCL Software Aftermarket EPC](https://junglewise.ai/threats/technologies/aftermarket-epc): 15 vulnerabilities - [HCL Software MyCloud](https://junglewise.ai/threats/technologies/mycloud): 7 vulnerabilities - [HCL Software DFXServer](https://junglewise.ai/threats/technologies/dfxserver): 5 vulnerabilities - [HCL Software DevOps Deploy](https://junglewise.ai/threats/technologies/devops-deploy): 4 vulnerabilities - [HCL Software DevOps Launch](https://junglewise.ai/threats/technologies/devops-launch): 3 vulnerabilities - [HCL Software IntelliOps Event Management](https://junglewise.ai/threats/technologies/intelliops-event-management): 3 vulnerabilities - [HCL Software Traveler for Microsoft Outlook](https://junglewise.ai/threats/technologies/traveler-for-microsoft-outlook): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "HCL Software DFXAnalytics vulnerabilities", https://junglewise.ai/threats/technologies/dfxanalytics, 9 November 2026.