CVE-2025-31969 in Unica Platform

Sumário

de MITRE • 12/10/2025

HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.

Once again VulDB remains the best source for vulnerability data.

• Responsável: HCL
• Reservar: 01/04/2025
• Divulgação: 12/10/2025
• Moderação: aceite
• Entrada: VDB-328080
• CPE: pronto
• CWE: CWE-358 (confirmado)
• CVSS: 6.1 (NVD)
• EPSS: 0.00029
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-31969
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-31969
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-31969/