Skip to content
OpenAdvisories
High · 8.1 CVE-2023-37500 EUVD-2023-41387GHSA-76cf-76mm-4mcr

A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform

Published Aug 3, 2023 · Updated Sep 27, 2024 · Assigned by HCL

Description

A Persistent Cross-site Scripting (XSS) vulnerability can be carried out on certain pages of Unica Platform.  An attacker could hijack a user's session and perform other attacks.

Affected products

VendorProductAffectedFixed
HCL Software HCL Unica Platform <12.1.1 —

References