UN
Product
Unica
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 11Low 0
Watch
Add Unica to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-51736 | 6.3 | Nov 28 | File upload vulnerability in HCL Technologies Ltd Affected: 12.0.0 |
| CVE-2025-62320 | 6.1 | Mar 17 | HTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica Platform Affected: before 12.1.11; 25.1.0 before 25.1.1.0.1 |
| CVE-2025-31969 | 6.1 | Oct 12 | HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP) Affected: through 25.1.0 |
| CVE-2023-37501 | 6.1 | Aug 3 | A Persistent XSS vulnerability can be carried out in a certain field of Unica Campaign Affected: before 12.1.1 |
| CVE-2023-37500 | 6.1 | Aug 3 | A Persistent Cross-site Scripting (XSS) vulnerability can be carried out on certain pages of Unica Platform Affected: before 12.1.1 |
| CVE-2023-37499 | 6.1 | Aug 3 | A Persistent Cross-site Scripting (XSS) vulnerability can be carried out in a certain field of the Unica Platform Affected: before 12.1.1 |
| CVE-2025-51733 | 5.5 | Nov 28 | Cross-Site Request Forgery (CSRF) vulnerability in HCL Technologies Ltd Affected: 12.0.0 |
| CVE-2024-42210 | 5.4 | Mar 19 | HCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerability Affected: before 12.1.9 |
| CVE-2025-51734 | 5.4 | Nov 28 | Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd Affected: 12.0.0 |
| CVE-2025-52615 | 5.3 | Oct 12 | HCL Unica Platform is impacted by misconfigured security related HTTP headers Affected: through 25.1.0 |
| CVE-2025-52614 | 4.3 | Oct 12 | HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability Affected: through 25.1.0 |
Showing 11
