CVE-2025-31993
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
HCL Unica Centralized Offer Management is vulnerable to Server-Side Request Forgery (SSRF). An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server.
Risk Assessment
SSRF vulnerability may allow an attacker to access internal network resources, potentially leading to disclosure of sensitive information or further attacks.
Recommendation
Strengthen input validation and restrict the ability to make requests to internal IP addresses. Also, monitor network traffic.
Other vulnerabilities in HCL Unica Centralized Offer Management
See all- CVE-2025-31998Low
HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit this information to launch targeted attacks, such as remote code execution or denial of service.
- CVE-2025-31997Medium
HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.
Original NVD description (English source)
HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF). An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS