CVE-2025-31969 — HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)

CVE-2025-31969

HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP) PUBLISHED

Description (CNA)

HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.

Affected (CNA)

Vendor / product	Versions
HCL Software / Unica Platform	affected <= 25.1

CWE

CWE-358

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124417

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.