Paper/Archive/CVE-2025-31998

CVE-2025-31998

HCL Software Unica Centralized Offer Management — HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information

EPSS 0.4%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 33.2.332 × 206.6 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.

Affected

ProductAffectedFixed inSource

Unica Centralized Offer Management<=25.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

HCL (CNA)3.5CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsupport.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422