HCL Unica vulnerabilities

3 known CVE vulnerabilities in HCL Unica, translated and rated.

CVE-2025-51735High
HCL Technologies Ltd. Unica 12.0.0 contains a CSV formula injection vulnerability. The description provides no further technical details or attack vectors.
CVE-2025-51734Medium
HCL Technologies Unica 12.0.0 contains a Cross-site Scripting (XSS) vulnerability. It may allow execution of malicious script in the context of a user's browser.
CVE-2025-52616Medium
HCL Unica 12.1.10 can expose sensitive system information. An attacker could use this information to form an attack plan by leveraging known vulnerabilities in the application.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS