Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-31997

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.

Published

2025-10-12T03:15:34.393

Last Modified

2025-10-29T17:27:23.037

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.2 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-639
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hcltech unica_centralized_offer_management < 25.1.0.1 Yes
References