CVE-2025-31966CWE-20

Boolean-Based SQL Injection in Multiple Unica Components

Low · published March 17, 2026

CVSS v3.1
2.7
EPSS
0%
Percentile
9.6
In the wild
Unconfirmed
What it is

HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, these are not enforced by the web server. An attacker can bypass these restrictions by sending manipulated HTTP requests directly to the server.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-03-17T11:29Z
EPSS history
Timeline
  • 17 MAR 11:29Z
    Boolean-Based SQL Injection in Multiple Unica Components
    cvelistv5