CVE-2025-31969
HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Oct 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L
Affected products
HCL Software · Unica PlatformWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →