CVE-2025-31969mediumCWE-358

CVE-2025-31969: medium-severity vulnerability in HCL Software Unica Platform

HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)

Published · Updated

Follow this CVE+ Monitor Unica Platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4epss 0.2%
HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L
Affected products
HCL Software · Unica Platform
Related CVEs — HCL Software Unica Platform

In the same product, most dangerous first.

CVE-2025-31996MEDIUMUnprotected files are impacting HCL Unica PlatformEPSS 0.2%CVE-2025-52615LOWHCL Unica Platform is impacted by misconfigured security related HTTP headersEPSS 0.2%CVE-2025-52614LOWHCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerabilityEPSS 0.1%