PT-2025-48336

CVE-2025-51734

·

Published

2025-11-28

·

Updated

2025-12-02

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions HCL Technologies Ltd. Unica version 12.0.0
Description A cross-site scripting (XSS) issue exists in HCL Technologies Ltd. Unica. This allows for the injection of malicious scripts into web pages viewed by other users. The vulnerability could potentially lead to unauthorized actions on behalf of a user.
Recommendations Update to a newer version that contains a fix for this vulnerability.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2025-51734
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com