CVE-2025-31995

{"id": "CVE-2025-31995", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-31995", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-14T19:35:20.568571Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.5, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.1}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL Software", "product": "MaxAI Workbench", "versions": [{"status": "affected", "version": "v12.1.10 - v25.1"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-13T05:15:50.970", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124425", "source": "psirt@hcl.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to exploit vulnerabilities such as SQL Injection, XSS, or command injection, leading to unauthorized access or data breaches, etc."}, {"lang": "es", "value": "HCL Unica MaxAI Workbench es vulnerable a la validaci\u00f3n de entrada inadecuada. Esto permite a los atacantes explotar vulnerabilidades como inyecci\u00f3n SQL, XSS o inyecci\u00f3n de comandos, lo que lleva a acceso no autorizado o filtraciones de datos, etc."}], "lastModified": "2026-10-08T12:10:00.217", "sourceIdentifier": "psirt@hcl.com"}