CVE-2025-59874

Name of the Vulnerable Software and Affected Versions HCL Hive Telco Observability (affected versions not specified)

Description The Keycloak component of the web application is missing required Content Security Policy (CSP) directives. A CSP is a security layer that helps detect and mitigate certain types of attacks, including Cross-Site Scripting (XSS) and data injection attacks. The absence of these essential directives can leave the site exposed to security risks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.