CVE-2025-31996

HCL Unica Platform is affected by unprotected files due to improper access controls.  These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users.

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-25)

CWE

CWE-552

Published

2025-10-13

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• hcltech:unica

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124418

Check your stackJSON