CVE-2025-51736
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A file upload vulnerability exists in HCL Technologies Ltd. Unica 12.0.0. The description does not specify the mechanism but concerns the upload functionality.
Risk Assessment
An attacker may exploit the upload functionality to place dangerous content on the server, potentially leading to code execution or confidentiality breaches.
Recommendation
Implement strict validation of uploaded file types and sizes and store them outside the web root. Contact the vendor for a patch.
Other vulnerabilities in HCL Unica
See all- CVE-2025-51735High
HCL Technologies Ltd. Unica 12.0.0 contains a CSV formula injection vulnerability. The description provides no further technical details or attack vectors.
- CVE-2025-51734Medium
HCL Technologies Unica 12.0.0 contains a Cross-site Scripting (XSS) vulnerability. It may allow execution of malicious script in the context of a user's browser.
- CVE-2025-51733Medium
A Cross-Site Request Forgery (CSRF) vulnerability exists in HCL Technologies Ltd. Unica 12.0.0. The description does not specify the mechanism details.
- CVE-2025-52616Medium
HCL Unica 12.1.10 can expose sensitive system information. An attacker could use this information to form an attack plan by leveraging known vulnerabilities in the application.
Original NVD description (English source)
File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS