CVE-2025-31996
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users.
Risk Assessment
Unprotected files may expose confidential data, potentially leading to compromise of the application, infrastructure, or users. Attackers can leverage this information for further attacks.
Recommendation
Implement proper access control mechanisms to protect files from unauthorized access. Review permission configurations and restrict access to sensitive files.
Other vulnerabilities in HCL Unica Platform
See all- CVE-2025-52615Low
HCL Unica Platform is impacted by misconfigured security related HTTP headers. This can lead to less secure browser default treatment for the policies controlled by these headers.
- CVE-2025-52614Low
HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site.
- CVE-2025-31969Medium
HCL Unica Platform is impacted by a misconfigured Content Security Policy (CSP). This can result in malicious resources being loaded and browsers being exposed to attacks such as cross-site scripting and clickjacking.
Original NVD description (English source)
HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS