CVE-2025-31998 — HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information

CVE-2025-31998

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information PUBLISHED

Description (CNA)

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.

Affected (CNA)

Vendor / product	Versions
HCL Software / Unica Centralized Offer Management	affected <=25.1

CWE

CWE-703, CWE-209

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.