VULNERABILITY INTELLIGENCE

CVE-2025-31997

CVSS score7.5 HIGH

EPSS probability0.22%

CISA KEVNot currently listed

Published2025-10-12

Last modified2026-10-08

Description

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.