VULNERABILITY INTELLIGENCE

CVE-2025-31969

CVSS score4 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-10-12
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L

Description

HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.

Weakness classification

  • psirt@hcl.com: CWE-358

Primary references