PT-2025-41704 · Hcl · Hcl Unica Centralized Offer Management

Published 2025-10-12 · Updated 2025-10-12 · CVE-2025-31998

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HCL Unica Centralized Offer Management (affected versions not specified)

Description HCL Unica Centralized Offer Management is susceptible to issues with unhandled exceptions, potentially revealing sensitive information. An attacker could leverage this exposed information to exploit known weaknesses and initiate targeted attacks, including remote code execution or denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

CWE-703

Related Identifiers

CVE-2025-31998

Affected Products

Hcl Unica Centralized Offer Management

References · 7

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-31998 · Security Note
• https://osv.dev/vulnerability/CVE-2025-31998 · Vendor Advisory
• https://twitter.com/CVEnew/status/1977214309500698927 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1977219124674584917 · Twitter Post
• https://t.me/cveNotify/138367 · Telegram Post
• https://t.me/CVEtracker/34697 · Telegram Post