CVE-2025-31998
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.
Affected (1)
Products: Hcltech: Unica Centralized Offer Management
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 25.1.0.1 |
Related CWEs
CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
CWE-703
Improper Check or Handling of Exceptional Conditions
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.
References (1)
Source: psirt@hcl.com
Vendor Advisory
Timeline
No history available yet.