3.5
Low
CVE-2025-52614 HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability
Description
HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Unica Platform 25.1 | earliest → 25.1 | No fix stated |
Other CVEs of Unica Platform
The 4 CVEs of Unica Platform →
CVE-2025-31996
HCL Unica Platform is affected by unprotected files due to improper access controls
5.3
Medium
CVE-2025-52615
HCL Unica Platform is impacted by misconfigured security related HTTP headers
3.5
Low
CVE-2025-31969
HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)
4.0
Medium