The vulnerability is a "Using Components with Known Vulnerabilities" flaw in HCL DFXAnalytics. The application embeds third‑party libraries or sub‑components that have not been patched. An attacker who can identify these publicly known security issues may be able to exploit them to gain unauthorized access or compromise the application, potentially leading to data exfiltration or further lateral movement.

HCL DFXAnalytics is the affected product. No specific version information is listed, indicating that any release built with unpatched libraries may be susceptible.

The CVSS score of 3.7 places the vulnerability in the moderate risk range. The EPSS score is not available, making it difficult to gauge current exploitation likelihood. The vulnerability is not listed in CISA’s KEV catalog, but the presence of known component weaknesses means that a determined adversary could exploit the flaw if the vulnerable library is accessible. The primary weakness is reflected by CWE‑1395, suggesting that the issue arises from improper handling of configuration or validation of third‑party components.