VendorsHcltechunicaall versions
Vulnerabilities

Hcltech Unica

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

18CVEs
CVE-2025-62319
Boolean-Based SQL Injection in Multiple Unica Components
Published 2026-03-16 · Analyzed
9.8EPSS 0.003
CVE-2023-37498
HCL Unica Platform is vulnerable to a privilege escalation by unauthorized group assignation
Published 2023-08-03 · Modified
8.8EPSS 0.006
CVE-2023-37497
An XML External Entity (XXE) Injection Vulnerability affects HCL Unica Platform
Published 2023-08-03 · Modified
8.8EPSS 0.005
CVE-2023-37499
A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform
Published 2023-08-03 · Modified
8.1EPSS 0.004
CVE-2023-37500
A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform
Published 2023-08-03 · Modified
8.1EPSS 0.004
CVE-2023-37501
A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Campaign
Published 2023-08-03 · Modified
8.1EPSS 0.004
CVE-2024-42210
HCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerability
Published 2026-03-19 · Modified
7.6EPSS 0.002
CVE-2021-27777
HCL Unica Platform is vulnerable to XML External Entity (XXE) injection
Published 2022-05-12 · Modified
7.5EPSS 0.008
CVE-2025-51735
CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0.
Published 2025-11-28 · Analyzed
7.5EPSS 0.003
CVE-2025-52616
HCL Unica 12.1.10 is affected by an exposure of sensitive information
Published 2025-10-12 · Analyzed
7.5EPSS 0.003
CVE-2025-31996
Unprotected files are impacting HCL Unica Platform
Published 2025-10-13 · Analyzed
7.5EPSS 0.002
CVE-2025-51736
File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0.
Published 2025-11-28 · Analyzed
6.3EPSS 0.002
CVE-2025-31969
HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)
Published 2025-10-12 · Analyzed
6.1EPSS 0.002
CVE-2025-62320
HTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica Platform
Published 2026-03-17 · Analyzed
6.1EPSS 0.002
CVE-2025-51733
Cross-Site Request Forgery (CSRF) vulnerability in HCL Technologies Ltd. Unica 12.0.0.
Published 2025-11-28 · Analyzed
5.5EPSS 0.001
CVE-2025-51734
Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd. Unica 12.0.0.
Published 2025-11-28 · Analyzed
5.4EPSS 0.002
CVE-2025-52615
HCL Unica Platform is impacted by misconfigured security related HTTP headers
Published 2025-10-12 · Analyzed
5.3EPSS 0.002
CVE-2025-52614
HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability
Published 2025-10-12 · Analyzed
4.3EPSS 0.001