What’s Vulnerable › Products

HCL Software HCL Unica Platform vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your HCL Software HCL Unica Platform version is affected

Latest HCL Software HCL Unica Platform vulnerabilities

• CVE-2024-42210 — HCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2025-62320 — HTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica Platform (CVSS 6.1)
• CVE-2025-62319 — Boolean-Based SQL Injection in Multiple Unica Components (CVSS 9.8)
• CVE-2025-51736 — (CVSS 6.3)
• CVE-2025-51735 — (CVSS 7.5)
• CVE-2025-51734 — (CVSS 5.4)
• CVE-2025-51733 — (CVSS 5.5)
• CVE-2025-31996 — Unprotected files are impacting HCL Unica Platform (CVSS 7.5)
• CVE-2025-52615 — HCL Unica Platform is impacted by misconfigured security related HTTP headers (CVSS 5.3)
• CVE-2025-52614 — HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability (CVSS 4.3)
• CVE-2025-31969 — HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP) (CVSS 6.1)
• CVE-2025-52616 — HCL Unica 12.1.10 is affected by an exposure of sensitive information (CVSS 7.5)
• CVE-2023-37501 — A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Campaign (CVSS 6.1)
• CVE-2023-37500 — A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform (CVSS 6.1)
• CVE-2023-37499 — A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform (CVSS 6.1)
• CVE-2023-37498 — HCL Unica Platform is vulnerable to a privilege escalation by unauthorized group assignation (CVSS 8.8)
• CVE-2023-37497 — An XML External Entity (XXE) Injection Vulnerability affects HCL Unica Platform (CVSS 8.8)
• CVE-2021-27777 — HCL Unica Platform is vulnerable to XML External Entity (XXE) injection (CVSS 7.5)