CVE-2025-51735
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
HCL Technologies Ltd. Unica 12.0.0 contains a CSV formula injection vulnerability. The description provides no further technical details or attack vectors.
Risk Assessment
Malicious content may be interpreted as a formula when an exported CSV file is opened in a spreadsheet application, potentially enabling command execution or data disclosure. The exact risk depends on the application's usage context.
Recommendation
Apply available updates or fixes from the vendor for Unica 12.0.0. Additionally, consider sanitizing data exported to CSV and limiting trust in opened files.
Other vulnerabilities in HCL Unica
See all- CVE-2025-51734Medium
HCL Technologies Unica 12.0.0 contains a Cross-site Scripting (XSS) vulnerability. It may allow execution of malicious script in the context of a user's browser.
- CVE-2025-52616Medium
HCL Unica 12.1.10 can expose sensitive system information. An attacker could use this information to form an attack plan by leveraging known vulnerabilities in the application.
Original NVD description (English source)
CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS