3.5
/ 10
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:L
Description
HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF). An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server.
Basic Information
ID
CVE-2025-31993
Source
HCL
Published
Oct 12, 2025 at 02:23
Affected Product
Vendor
HCL Software
Product
Unica Centralized Offer Management
Version
<=25.1
Affected Versions
HCL Software Unica Centralized Offer Management <=25.1