Vulnerability · Published Oct 12, 2025 · Assigned by HCL
CVE-2025-31993HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF)
Low 3.5
In plain English
A low-severity server-side request forgery in Unica Centralized Offer Management from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)3.5Low
Exploit odds (30 days)0.2%top 85.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF). An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL Software | Unica Centralized Offer Management | <=25.1 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:L