CVE-2025-31993CWE-918ssrf

CVE-2025-31993

Low · published October 12, 2025

CVSS v3.1
3.5
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF). An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.0th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2025-10-12T07:15Z
Affected products (1)
ProductVersionsFixed in
hcltech/unica_centralized_offer_management< 25.1.0.125.1.0.1
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422 · [email protected]
EPSS history
Timeline
  • 12 OCT 02:23Z
    HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)
    cvelistv5