Riskcovery

CVE-2025-31998

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information

State
Published
Severity
3.5 Low
Published
Oct 12, 2025
Updated
Oct 17, 2025
Reserved
Apr 1, 2025

Read the record on cve.org

Description

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.

Scores

CVSSScoreVectorSource
3.13.5 LowCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:NHCL

Weaknesses

  • CWE-703 Improper Check or Handling of Exceptional Conditions
  • CWE-209 Generation of Error Message Containing Sensitive Information

Affected Products

ProductVersions
Unica Centralized Offer ManagementHCL Software
  • <=25.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.