CVEvulnerability

CVE-2025-31998

9.8 CRITICAL Published 2025-10-12 Modified 2026-10-08 Official page ↗
Status
Analyzed
Published
2025-10-12
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.5 LOW — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-209, CWE-703

Description

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.

Affected configurations

• hcltech unica centralized offer management (< 25.1.0.1)

Related

Weakness · CWE (2)

  • CWE-209 Generation of Error Message Containing Sensitive Information weakness
  • CWE-703 Improper Check or Handling of Exceptional Conditions weakness

References