CVE-2025-31997

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References IDOR. An attacker can bypass authorization and access resources in the system directly, for example database records or files...

CVE-2025-31998

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service...

CVE-2025-31998

HCL Unica Centralized Offer Management is affected by a weakness described as unhandled exceptions that can disclose sensitive information. Multiple sources (NVD, Red Hat, EU ENISA, CVE lists, CNNVD, PT Security) reiterate that this could enable attackers to leverage exposed data to mount exploit...

PT-2025-41704

Name of the Vulnerable Software and Affected Versions HCL Unica Centralized Offer Management affected versions not specified Description HCL Unica Centralized Offer Management is susceptible to issues with unhandled exceptions, potentially revealing sensitive information. An attacker could levera...

HCL Unica Centralized Offer Management 安全漏洞

HCL Unica Centralized Offer Management is a module of HCL India responsible for the unified management and distribution of offers. A security vulnerability exists in HCL Unica Centralized Offer Management that stems from improper input validation and could lead to a server-side request forgery...