CVE-2025-31970: HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability
HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives for object-src and base-uri, which could allow an attacker to exploit injection vectors such as Cross-Site Scripting (XSS)
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31970?
CVE-2025-31970 has a medium severity level due to its potential impact on application security.
How do I fix CVE-2025-31970?
To fix CVE-2025-31970, you should configure the Content-Security-Policy to include strict directives for object-src and base-uri.
Which software is affected by CVE-2025-31970?
CVE-2025-31970 affects HCL DFXAnalytics due to its insecure security header configuration.
What types of attacks could exploit CVE-2025-31970?
CVE-2025-31970 could allow attacks such as cross-site scripting or unauthorized resource access due to weak security policies.
Is CVE-2025-31970 a known vulnerability?
Yes, CVE-2025-31970 is a recognized vulnerability documented in security databases.