What’s Vulnerable › Vulnerabilities

CVE-2025-31969: HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-12 · updated 2026-10-08
• Weakness: CWE-358

Description

HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.

Affected products

• HCL Software HCL Unica Platform: through 25.1.0

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124417

Get alerted when CVE-2025-31969 or the next vulnerability affects your stack