CVE-2025-52616
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
HCL Unica 12.1.10 can expose sensitive system information. An attacker could use this information to form an attack plan by leveraging known vulnerabilities in the application.
Risk Assessment
The risk is that an attacker can gather system information, which may facilitate targeted attacks on the application and infrastructure.
Recommendation
It is recommended to restrict access to system information and apply vendor-provided updates or mitigations.
Other vulnerabilities in HCL Unica
See all- CVE-2025-51735High
HCL Technologies Ltd. Unica 12.0.0 contains a CSV formula injection vulnerability. The description provides no further technical details or attack vectors.
- CVE-2025-51734Medium
HCL Technologies Unica 12.0.0 contains a Cross-site Scripting (XSS) vulnerability. It may allow execution of malicious script in the context of a user's browser.
Original NVD description (English source)
HCL Unica 12.1.10 can expose sensitive system information. An attacker could use this information to form an attack plan by leveraging known vulnerabilities in the application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS