UN
Product
Unica
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 11Low 0
Watch
Add Unica to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-62319 | 9.8 | Mar 16 | Boolean-Based SQL Injection in Multiple Unica Components Affected: before 25.1.1.0.1 |
| CVE-2023-37498 | 8.8 | Aug 3 | A user is capable of assigning him/herself to arbitrary groups by reusing a POST request issued by an administrator Affected: before 12.1.1 |
| CVE-2023-37497 | 8.8 | Aug 3 | The Unica application exposes an API which accepts arbitrary XML input Affected: before 11.1.0.6; 12.0 before 12.1.1 |
| CVE-2025-51735 | 7.5 | Nov 28 | CSV formula injection vulnerability in HCL Technologies Ltd Affected: 12.0.0 |
| CVE-2025-31996 | 7.5 | Oct 13 | Unprotected files are impacting HCL Unica Platform Affected: before 25.1.0.1 |
| CVE-2025-52616 | 7.5 | Oct 12 | HCL Unica 12.1.10 is affected by an exposure of sensitive information Affected: 12.1.10 |
| CVE-2021-27777 | 7.5 | May 12 | XML External Entity (XXE) injection vulnerabilities occur when poorly configured XML parsers process user supplied input without sufficient validation Affected: before 12.1.1 |
| CVE-2025-51736 | 6.3 | Nov 28 | File upload vulnerability in HCL Technologies Ltd Affected: 12.0.0 |
| CVE-2025-62320 | 6.1 | Mar 17 | HTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica Platform Affected: before 12.1.11; 25.1.0 before 25.1.1.0.1 |
| CVE-2025-31969 | 6.1 | Oct 12 | HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP) Affected: through 25.1.0 |
| CVE-2023-37501 | 6.1 | Aug 3 | A Persistent XSS vulnerability can be carried out in a certain field of Unica Campaign Affected: before 12.1.1 |
| CVE-2023-37500 | 6.1 | Aug 3 | A Persistent Cross-site Scripting (XSS) vulnerability can be carried out on certain pages of Unica Platform Affected: before 12.1.1 |
| CVE-2023-37499 | 6.1 | Aug 3 | A Persistent Cross-site Scripting (XSS) vulnerability can be carried out in a certain field of the Unica Platform Affected: before 12.1.1 |
| CVE-2025-51733 | 5.5 | Nov 28 | Cross-Site Request Forgery (CSRF) vulnerability in HCL Technologies Ltd Affected: 12.0.0 |
| CVE-2024-42210 | 5.4 | Mar 19 | HCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerability Affected: before 12.1.9 |
| CVE-2025-51734 | 5.4 | Nov 28 | Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd Affected: 12.0.0 |
| CVE-2025-52615 | 5.3 | Oct 12 | HCL Unica Platform is impacted by misconfigured security related HTTP headers Affected: through 25.1.0 |
| CVE-2025-52614 | 4.3 | Oct 12 | HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability Affected: through 25.1.0 |
Showing 18