Reflected Cross-Site Scripting Vulnerability in HCL Unica Campaign
CVE-2025-31994
4.3MEDIUM
What is CVE-2025-31994?
HCL Unica Campaign version 12.1.10 is susceptible to a reflected XSS vulnerability. This issue arises when an attacker injects a malicious script into an HTTP request, which is subsequently reflected in the server's immediate response. This allows the script to execute in the victim's browser as though it came from a trusted source, potentially compromising user data and increasing the risk of further attacks.
Affected Version(s)
Unica Campaign <= 12.1.10
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved