Improper Input Validation in HCL Unica MaxAI Workbench

CVE-2025-31995

What is CVE-2025-31995?

HCL Unica MaxAI Workbench exhibits a critical flaw due to improper input validation, enabling attackers to exploit this weakness through various means such as SQL Injection, Cross-Site Scripting (XSS), and command injection. These vulnerabilities pose significant risks, allowing unauthorized access to sensitive data and potentially leading to extensive data breaches. It is essential for users of the affected versions to implement effective security measures and apply the necessary patches to mitigate these risks.

References