Login Request a demo
UN
Product
Unica
by Hcltech · last CVE Mar 19, 2026
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 1High 6Medium 11Low 0
Severity
All severities18Critical1High6Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Unica to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-37498
8.8
1%
Aug 3
A user is capable of assigning him/herself to arbitrary groups by reusing a POST request issued by an administrator
Affected: before 12.1.1
CVE-2023-37497
8.8
1%
Aug 3
The Unica application exposes an API which accepts arbitrary XML input
Affected: before 11.1.0.6; 12.0 before 12.1.1
CVE-2025-51735
7.5
0%
Nov 28
CSV formula injection vulnerability in HCL Technologies Ltd
Affected: 12.0.0
CVE-2025-31996
7.5
0%
Oct 13
Unprotected files are impacting HCL Unica Platform
Affected: before 25.1.0.1
CVE-2025-52616
7.5
0%
Oct 12
HCL Unica 12.1.10 is affected by an exposure of sensitive information
Affected: 12.1.10
CVE-2021-27777
7.5
1%
May 12
XML External Entity (XXE) injection vulnerabilities occur when poorly configured XML parsers process user supplied input without sufficient validation
Affected: before 12.1.1
Showing 6