Boolean-Based SQL Injection Vulnerability in HCL Software Products
CVE-2025-62319

9.8CRITICAL

Key Information:

Vendor

HCL Software
Status
Unica
Vendor
CVE Published:
16 March 2026

What is CVE-2025-62319?

The vulnerability involves a Boolean-Based SQL Injection, a technique that allows attackers to manipulate SQL queries by injecting Boolean conditions like TRUE or FALSE into input fields. This method exploits the application's response to the injected conditions, enabling unauthorized access to backend configuration queries and sensitive data without generating visible database errors. If left unpatched, compromised systems could lead to severe breaches of database integrity and confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Unica Version 25.1.1 and below

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.