Skip to content
OpenAdvisories
Low · 3.5 CVE-2025-52614 EUVD-2025-33889GHSA-h44j-33hm-f6c4

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability

Published Oct 12, 2025 · Updated Oct 14, 2025 · Assigned by HCL

Description

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site.

Affected products

VendorProductAffectedFixed
HCL Software Unica Platform <= 25.1 —

References