4.0
Medium
CVE-2025-31969 HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)
Description
HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Unica Platform 25.1 | earliest → 25.1 | No fix stated |
Other CVEs of Unica Platform
The 4 CVEs of Unica Platform →
CVE-2025-31996
HCL Unica Platform is affected by unprotected files due to improper access controls
5.3
Medium
CVE-2025-52615
HCL Unica Platform is impacted by misconfigured security related HTTP headers
3.5
Low
CVE-2025-52614
HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability
3.5
Low