Misconfigured Content Security Policy in HCL Unica Platform

CVE-2025-31969

What is CVE-2025-31969?

The HCL Unica Platform is affected by a misconfigured Content Security Policy (CSP) that allows potentially harmful resources to be loaded. This vulnerability exposes users to various web-based attacks, including cross-site scripting (XSS) and clickjacking. Attackers could exploit these weakness to inject malicious scripts or hijack user sessions, compromising the integrity of the application and the confidentiality of user data. It is crucial to address this misconfiguration to enhance the security posture of the platform.

References