4.6 Medium

CVE-2025-31992 HCL Unica MaxAI Assistant is susceptible to a HTML injection vulnerability

Description

HCL Unica MaxAI Assistant is susceptible to a HTML injection vulnerability. An attacker could insert special characters that are processed client-side in the context of the user's session.

Affected products and versions

Product	Affected versions	Fixed in
MaxAI Assistant	Versions not published

Do you use MaxAI Assistant?

Track this CVE Watch MaxAI Assistant Check my SBOMs

www.cveye.io/en/cve/CVE-2025-31992

Timeline

Published October 12, 2025
Last modified October 15, 2025

References

support.hcl-software.com support.hcl-software.com

Track this CVE