Hcltech Unica Centralized Offer Management — known CVE vulnerabilities

Every CVE whose affected-product data names Hcltech Unica Centralized Offer Management, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-31997 — CVSS 4.2 (medium): HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and…
• CVE-2025-31993 — CVSS 3.5 (low): HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF). An attacker can exploit improper…
• CVE-2025-31998 — CVSS 3.5 (low): HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can…