← Back

CVE-2025-52614

nvd nist
Published: Oct 12, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site.

Affected (1)

Products: Hcltech: Unica
Hcltech
1 product
Unica
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Unica
Up to 25.1.0

Related CWEs

CWE-614
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.