PT-2025-41751 · Hcl · Hcl Unica Platform

Published 2025-10-13 · Updated 2025-10-21 · CVE-2025-31996

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HCL Unica Platform (affected versions not specified)

Description The HCL Unica Platform is susceptible to unauthorized access to files due to inadequate access controls. These files potentially contain sensitive data, including private or system information, which could be exploited to compromise the application, its underlying infrastructure, or user accounts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2025-31996

Affected Products

Hcl Unica Platform

References · 8

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124418 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-31996 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-31996 · Security Note
• https://twitter.com/VulmonFeeds/status/1977593142963495264 · Twitter Post
• https://twitter.com/CVEnew/status/1977591023724371995 · Twitter Post
• https://t.me/CVEtracker/34742 · Telegram Post
• https://t.me/cveNotify/139621 · Telegram Post
• https://t.me/cveNotify/138414 · Telegram Post