CVE-2025-31969 MEDIUM

CVE-2025-31969: HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)

Vendor Hcl Software

Product Unica Platform

Weakness CWE-358

Published October 12, 2025

Last update October 14, 2025

View on NVD All CVEs

CVSS base score

4.0/10

Attack vector Adjacent

Attack complexity High

Privileges required High

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L

What the vulnerability does

01Description

HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.

Key dates

02Disclosure timeline

October 12, 2025 CVE published

October 14, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-31969 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/358.html

Related vulnerabilities

04Related CVE

CVE-2025-13333 IBM WebSphere Application Server could provide weaker than expected security CVE-2025-10457 Bluetooth: Out-Of-Context le_conn_rsp Handling CVE-2021-34790 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities CVE-2017-15105 CVE-2025-31983 HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header