Skip to content
OpenAdvisories
Medium · 4.6 CVE-2025-31992 EUVD-2025-33884GHSA-544m-gjwc-8jgh

HCL MaxAI Assistant is susceptible to a HTML injection vulnerability

Published Oct 12, 2025 · Updated Oct 15, 2025 · Assigned by HCL

Description

HCL Unica MaxAI Assistant is susceptible to a HTML injection vulnerability. An attacker could insert special characters that are processed client-side in the context of the user's session.

Affected products

VendorProductAffectedFixed
HCL Software MaxAI Assistant 12.1.10 - 25.1 —

References