CVE-2025-51734
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
HCL Technologies Unica 12.0.0 contains a Cross-site Scripting (XSS) vulnerability. It may allow execution of malicious script in the context of a user's browser.
Risk Assessment
Session hijacking or unauthorized actions on behalf of the user are possible. The vulnerability could be used for phishing within the application.
Recommendation
Apply available patches or upgrade HCL Unica. Implement input validation and encoding in the application interface.
Other vulnerabilities in HCL Unica
See all- CVE-2025-51735High
HCL Technologies Ltd. Unica 12.0.0 contains a CSV formula injection vulnerability. The description provides no further technical details or attack vectors.
- CVE-2025-52616Medium
HCL Unica 12.1.10 can expose sensitive system information. An attacker could use this information to form an attack plan by leveraging known vulnerabilities in the application.
Original NVD description (English source)
Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd. Unica 12.0.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS