CVE-2025-52615 LOW

CVE-2025-52615: HCL Unica Platform is impacted by misconfigured security related HTTP headers

Vendor Hcl Software
Product Unica Platform
Weakness CWE-693
Published October 12, 2025
Last update October 16, 2025

CVSS base score

3.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

HCL Unica Platform is impacted by misconfigured security related HTTP headers. This can lead to less secure browser default treatment for the policies controlled by these headers.

Key dates

02Disclosure timeline

October 12, 2025 CVE published
October 16, 2025 Record updated