VYPR

DFMPro

by HCL Software

CVEs (1)

  • CVE-2025-59866LowJul 17, 2026
    risk 0.00cvss 3.3epss 0.00

    The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.