CVE-2025-31996

HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124418	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:unica:*:*:*:*:*:*:*:*

History

08 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) HCL Unica Platform se ve afectada por archivos desprotegidos debido a controles de acceso inadecuados. Estos archivos pueden contener información sensible, como información privada o del sistema, que puede ser explotada por atacantes para comprometer la aplicación, la infraestructura o a los usuarios.

Information

Published : 2025-10-13 04:15

Updated : 2026-10-08 12:10

NVD link : CVE-2025-31996

Mitre link : CVE-2025-31996

CVE.ORG link : CVE-2025-31996

JSON object : View

Products Affected

hcltech

unica

CWE

CWE-552

Files or Directories Accessible to External Parties

{"id": "CVE-2025-31996", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-31996", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-14T13:39:48.066695Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL Software", "product": "Unica Platform", "versions": [{"status": "affected", "version": "<= 25.1"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-13T04:15:56.120", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124418", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-552"}]}], "descriptions": [{"lang": "en", "value": "HCL Unica Platform is affected by unprotected files due to improper access controls. \u00a0These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users."}, {"lang": "es", "value": "HCL Unica Platform se ve afectada por archivos desprotegidos debido a controles de acceso inadecuados. Estos archivos pueden contener informaci\u00f3n sensible, como informaci\u00f3n privada o del sistema, que puede ser explotada por atacantes para comprometer la aplicaci\u00f3n, la infraestructura o a los usuarios."}], "lastModified": "2026-10-08T12:10:00.217", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:unica:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3EA8F8F-657C-42BF-8415-F787BA65B853", "versionEndExcluding": "25.1.0.1"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}