1. Home
  2. CVE Database
  3. CVE-2025-31998
LOW · 3.5

CVE-2025-31998

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities la...

Vulnerability Description

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.

CVSS Score

3.5

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
HcltechUnica Centralized Offer Management< 25.1.0.1

Related Weaknesses (CWE)

CWE-703CWE-209

References

FAQ

What is CVE-2025-31998?

CVE-2025-31998 is a vulnerability with a CVSS score of 3.5 (LOW). HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities la...

How severe is CVE-2025-31998?

CVE-2025-31998 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-31998?

Check the references section above for vendor advisories and patch information. Affected products include: Hcltech Unica Centralized Offer Management.