Sensitive Information Exposure in HCL Unica Centralized Offer Management
CVE-2025-31998

3.5LOW

What is CVE-2025-31998?

HCL Unica Centralized Offer Management is vulnerable due to poor handling of exceptions, leading to unintended exposure of sensitive information. This flaw can enable attackers to utilize exposed data to exploit additional vulnerabilities, facilitating targeted attacks that may result in remote code execution or denial of service.

Affected Version(s)

Unica Centralized Offer Management <=25.1

References

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.