Skip to content
Sign in
4.2 Medium

CVE-2025-31997 HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR)

Description

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.

Affected products and versions

Product Affected versions Fixed in
Unica Centralized Offer Management 25.1 earliest → 25.1 No fix stated

Other CVEs of Unica Centralized Offer Management

The 3 CVEs of Unica Centralized Offer Management →
CVE-2025-31998 HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information 3.5 Low CVE-2025-31993 HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF) 3.5 Low
Track this CVE