The vulnerability is a "Using Components with Known Vulnerabilities" flaw in HCL DFXAnalytics. The application embeds third‑party libraries or sub‑components that have not been patched. An attacker who can identify these publicly known security issues may be able to exploit them to gain unauthorized access or compromise the application, potentially leading to data exfiltration or further lateral movement. Additionally, this flaw aligns with CWE‑1395 and includes an unspecified other CWE entry (NVD-CWE-noinfo).

HCL DFXAnalytics is the affected product. No specific version information is listed, indicating that any release built with unpatched libraries may be susceptible.

The CVSS score of 3.7 places the vulnerability in the moderate risk range. The EPSS score is 0.00033, indicating a very low probability of exploitation. The vulnerability is not listed in CISA’s KEV catalog, but the presence of known component weaknesses means that a determined adversary could exploit the flaw if the vulnerable library is accessible. The primary weakness is reflected by CWE‑1395 and includes an unspecified other CWE entry (NVD-CWE-noinfo), suggesting that the issue arises from improper handling of configuration or validation of third‑party components.