CVE-2025-52616CWE-497

CVE-2025-52616

Medium · published October 12, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

HCL Unica 12.1.10 can expose sensitive system information. An attacker could use this information to form an attack plan by leveraging known vulnerabilities in the application.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00260 · 16.8th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-10-12T09:15Z
Affected products (1)
ProductVersionsFixed in
hcltech/unicaall versions—
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124230 · [email protected]
EPSS history
Timeline
  • 12 OCT 04:24Z
    HCL Unica 12.1.10 is affected by an exposure of sensitive information
    cvelistv5