CVE-2025-52614 — HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability

CVE-2025-52614

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability PUBLISHED

Description (CNA)

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site.

Affected (CNA)

Vendor / product	Versions
HCL Software / Unica Platform	affected <= 25.1

CWE

CWE-614

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124417

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.