CVE-2025-31998

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.
Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:unica_centralized_offer_management:*:*:*:*:*:*:*:*

History

29 Oct 2025, 17:20

Type Values Removed Values Added
References () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422 - () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422 - Vendor Advisory
First Time Hcltech
Hcltech unica Centralized Offer Management
CPE cpe:2.3:a:hcltech:unica_centralized_offer_management:*:*:*:*:*:*:*:*

12 Oct 2025, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-10-12 03:15

Updated : 2025-10-29 17:20


NVD link : CVE-2025-31998

Mitre link : CVE-2025-31998

CVE.ORG link : CVE-2025-31998


JSON object : View

Products Affected

hcltech

  • unica_centralized_offer_management
CWE
CWE-209

Generation of Error Message Containing Sensitive Information

CWE-703

Improper Check or Handling of Exceptional Conditions