The vulnerability is an insufficient transport layer protection flaw in HCL DFXAnalytics. Data transmitted over the network is not encrypted, allowing an attacker to intercept or tamper with traffic. This can lead to the compromise of confidentiality, integrity, and authentication of sensitive information. The weakness is classified as CWE‑319, which relates to lack of encryption or improper use of encryption mechanisms.

The affected product is HCL DFXAnalytics. No specific version details are listed, so all deployments running the unencrypted transport configuration could be impacted. Administrators should verify whether their instance is configured to use secure transport (TLS/SSL) before assessing risk.

The CVSS score of 3.7 indicates a moderate severity. No EPSS score is available, and the vulnerability is not listed in CISA's KEV catalog. The attack vector is likely network‑based; a remote adversary who can observe or modify traffic between the client and DFXAnalytics could exploit the lack of encryption. Exploitation requires no special credentials and can affect any user session that transmits data unencrypted.