CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,435 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,435
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product hcltech:unica. Show all products

12 CVEs, showing 1 to 12
CVESeverityTitlePublished
CVE-2025-52616High 7.5HCL Unica 12.1.10 can expose sensitive system information.Oct 12, 2025
CVE-2025-31969Medium 6.1HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP).Oct 12, 2025
CVE-2025-52614Medium 4.3HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability.Oct 12, 2025
CVE-2025-52615Medium 5.3HCL Unica Platform is impacted by misconfigured security related HTTP headers.Oct 12, 2025
CVE-2025-31996High 7.5HCL Unica Platform is affected by unprotected files due to improper access controls.Oct 13, 2025
CVE-2025-51733Medium 5.5Cross-Site Request Forgery (CSRF) vulnerability in HCL Technologies Ltd.Nov 28, 2025
CVE-2025-51734Medium 5.4Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd.Nov 28, 2025
CVE-2025-51735High 7.5CSV formula injection vulnerability in HCL Technologies Ltd.Nov 28, 2025
CVE-2025-51736Medium 6.3File upload vulnerability in HCL Technologies Ltd.Nov 28, 2025
CVE-2025-62319Critical 9.8Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions (TRUE or FALSE) into application input fields.Mar 16, 2026
CVE-2025-62320Medium 6.1HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage.Mar 17, 2026
CVE-2024-42210Medium 5.4A Stored cross-site scripting (XSS) vulnerability affects HCL Unica Marketing Operations v12.1.8 and lower.Mar 19, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.