CVE-2025-31997: Unica Centralized Offer Management: güvenlik açığı

Açıklama (NVD)

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.

Özet bilgiler

Ürün

Hcltech Unica Centralized Offer Management

CVSS v3.1

7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

%0,22 (yüzdelik 13)

CWE

CWE-639

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• support.hcl-software.com
• CWE-639