CVE-2025-31997 — HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR)

CVE-2025-31997

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR) PUBLISHED

Description (CNA)

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.

Affected (CNA)

Vendor / product	Versions
HCL Software / Unica Centralized Offer Management	affected <=25.1

CWE

CWE-639

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.