VULNERABILITY INTELLIGENCE

CVE-2025-31997

CVSS score4.2 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-10-12
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N

Description

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.

Weakness classification

  • CWE-639: Authorization Bypass Through User-Controlled Key

Primary references