CVE-2025-31993 — HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)

CVE-2025-31993

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF) PUBLISHED

Description (CNA)

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF). An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server.

Affected (CNA)

Vendor / product	Versions
HCL Software / Unica Centralized Offer Management	affected <=25.1

CWE

CWE-918

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.