PT-2025-41750 · Hcl · Hcl Unica Campaign

Published 2025-10-13 · Updated 2025-10-13 · CVE-2025-31994

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions HCL Unica Campaign version 12.1.10

Description The software is susceptible to Reflected Cross-Site Scripting (XSS). An attacker can inject malicious script into an HTTP request. This script is then reflected unsafely in the server's response to the victim's browser, causing the script to execute as if it originated from the trusted website. The attack vector involves manipulating HTTP requests to include malicious code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-31994

Affected Products

Hcl Unica Campaign

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-31994 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124472 · Note
• https://t.me/cveNotify/138413 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1977598261754990678 · Twitter Post
• https://twitter.com/CVEnew/status/1977591022742823174 · Twitter Post
• https://t.me/CVEtracker/34741 · Telegram Post