CVE-2025-59866

Description

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.

CVSS Vector

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132365