CVE-2025-31997

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-25)

CWE

CWE-639

Published

2025-10-12

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• hcltech:unica_centralized_offer_management

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422

Check your stackJSON