CVE-2025-31966 — Boolean-Based SQL Injection in Multiple Unica Components

CVE-2025-31966

Boolean-Based SQL Injection in Multiple Unica Components PUBLISHED

Description (CNA)

HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, these are not enforced by the web server. An attacker can bypass these restrictions by sending manipulated HTTP requests directly to the server.

Affected (CNA)

Vendor / product	Versions
HCL / Sametime	affected Version 2.0.2 FP2 and older

CWE

CWE-20

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124722

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.