Cookie Vulnerability in HCL Unica Platform

CVE-2025-52614

What is CVE-2025-52614?

The HCL Unica Platform is vulnerable to an issue where cookies are not set with the HTTPOnly flag. This lack of protection may allow malicious agents to exploit the vulnerability by luring users through specially crafted links. When users interact with these links, sensitive session data might be exposed, increasing the risk of cross-site scripting (XSS) attacks. It is crucial for users to stay informed about this vulnerability and for developers to implement best practices for cookie security.

References