CVE-2025-51733
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A Cross-Site Request Forgery (CSRF) vulnerability exists in HCL Technologies Ltd. Unica 12.0.0. The description does not specify the mechanism details.
Risk Assessment
An attacker can trick an authenticated user into performing unwanted actions in the application, potentially leading to data modification or configuration changes.
Recommendation
Implement anti-CSRF tokens for state-changing requests and verify the Origin/Referer header. Contact the vendor for a patch.
Other vulnerabilities in HCL Unica
See all- CVE-2025-51736Medium
A file upload vulnerability exists in HCL Technologies Ltd. Unica 12.0.0. The description does not specify the mechanism but concerns the upload functionality.
- CVE-2025-51735High
HCL Technologies Ltd. Unica 12.0.0 contains a CSV formula injection vulnerability. The description provides no further technical details or attack vectors.
- CVE-2025-51734Medium
HCL Technologies Unica 12.0.0 contains a Cross-site Scripting (XSS) vulnerability. It may allow execution of malicious script in the context of a user's browser.
- CVE-2025-52616Medium
HCL Unica 12.1.10 can expose sensitive system information. An attacker could use this information to form an attack plan by leveraging known vulnerabilities in the application.
Original NVD description (English source)
Cross-Site Request Forgery (CSRF) vulnerability in HCL Technologies Ltd. Unica 12.0.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS