CVE-2025-31998 LOW

CVE-2025-31998: HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information

Vendor Hcl Software
Product Unica Centralized Offer Management
Weakness CWE-703
Published October 12, 2025
Last update October 17, 2025

CVSS base score

3.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.

Key dates

02Disclosure timeline

October 12, 2025 CVE published
October 17, 2025 Record updated