CVE-2023-37497 An XML External Entity (XXE) Injection Vulnerability affects HCL Unica Platform

The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can successfully perform XML External Entity attacks XXE against the backend service...

CVE-2023-37497 An XML External Entity (XXE) Injection Vulnerability affects HCL Unica Platform

The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can successfully perform XML External Entity attacks XXE against the backend service...

CVE-2023-37497

Summary: CVE-2023-37497 affects the HCL Unica Platform API that accepts arbitrary XML. The root cause is vulnerability to XML External Entity (XXE) processing, enabling an authenticated attacker with certain privileges to perform XXE against the backend. Documents indicate high-severity impact ( ...