CVE-2025-31969

HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.

CVSS v3 4.0 MEDIUM

4.0^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.0 / Impact : 2.7

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124417	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:unica:*:*:*:*:*:*:*:*

History

08 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) HCL Unica Platform se ve afectada por una Política de Seguridad de Contenido (CSP) mal configurada. Esto puede resultar en la carga de recursos maliciosos y los navegadores pueden encontrarse con ciertos tipos de ataques, como cross-site scripting y clickjacking.

Information

Published : 2025-10-12 08:15

Updated : 2026-10-08 13:10

NVD link : CVE-2025-31969

Mitre link : CVE-2025-31969

CVE.ORG link : CVE-2025-31969

JSON object : View

Products Affected

hcltech

unica

CWE

CWE-358

Improperly Implemented Security Check for Standard

{"id": "CVE-2025-31969", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-31969", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-14T13:29:03.592166Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.0, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 1.0}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL Software", "product": "Unica Platform", "versions": [{"status": "affected", "version": "<= 25.1"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-12T08:15:40.210", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124417", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-358"}]}], "descriptions": [{"lang": "en", "value": "HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking."}, {"lang": "es", "value": "HCL Unica Platform se ve afectada por una Pol\u00edtica de Seguridad de Contenido (CSP) mal configurada. Esto puede resultar en la carga de recursos maliciosos y los navegadores pueden encontrarse con ciertos tipos de ataques, como cross-site scripting y clickjacking."}], "lastModified": "2026-10-08T13:10:00.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:unica:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B287D9C3-B8E1-4988-864C-855E14105538", "versionEndIncluding": "25.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}