CVE-2025-31998

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.

CVSS 3.1

9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-25)

CWEs

CWE-209, CWE-703

Published

2025-10-12

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• hcltech:unica_centralized_offer_management

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422

Check your stackJSON