CVE-2025-52614CWE-614

CVE-2025-52614

Low · published October 12, 2025

CVSS v3.1
3.5
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00138 · 2.9th percentile
Weakness
CWE-614 · Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
Published
2025-10-12T12:15Z
Affected products (1)
ProductVersionsFixed in
hcltech/unica≤ 25.1.0—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124417 · [email protected]
EPSS history
Timeline
  • 12 OCT 07:52Z
    HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability
    cvelistv5