Skip to content
OpenAdvisories
Low · 3.5 CVE-2025-31993 EUVD-2025-33881GHSA-x3cx-px43-rqm5

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)

Published Oct 12, 2025 · Updated Oct 14, 2025 · Assigned by HCL

Description

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF). An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server.

Affected products

VendorProductAffectedFixed
HCL Software Unica Centralized Offer Management <=25.1 —

References