CVE-2025-31969CWE-358
CVE-2025-31969
Medium · published October 12, 2025
What it is
HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.
The record
Technical detail
- CVSS v3.1
- 4.0 · MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00164 · 5.3th percentile
- Weakness
- CWE-358 · Improperly Implemented Security Check for Standard
- Published
- 2025-10-12T12:15Z
Affected products (1)
| Product | Versions | Fixed in |
|---|
| hcltech/unica | ≤ 25.1.0 | — |
References (1)
EPSS history
Timeline