CVE-2025-31992

HCL MaxAI Assistant is susceptible to a HTML injection vulnerability PUBLISHED

Description (CNA)

HCL Unica MaxAI Assistant is susceptible to a HTML injection vulnerability. An attacker could insert special characters that are processed client-side in the context of the user's session.

Affected (CNA)

Vendor / product	Versions
HCL Software / MaxAI Assistant	affected 12.1.10 - 25.1

CWE

CWE-80

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124424

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.