CVE-2025-31969

MEDIUM

4.0

Description

HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.

Details CVE

Score CVSS v3.14.0

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L

Vecteur d'attaqueADJACENT_NETWORK

ComplexiteHIGH

Privileges requisHIGH

Interaction utilisateurNONE

Publie10/12/2025

Derniere modification10/20/2025

Sourcenvd

Observations honeypot0

Produits affectes

hcltech:unica

Faiblesses (CWE)

CWE-358

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124417(psirt@hcl.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.