CVE-2025-31969: HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP)
HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31969?
CVE-2025-31969 has a high severity due to potential exploitation through cross-site scripting and clickjacking attacks.
How do I fix CVE-2025-31969?
Fix CVE-2025-31969 by properly configuring the Content Security Policy (CSP) to restrict the loading of untrusted resources.
What types of attacks are associated with CVE-2025-31969?
CVE-2025-31969 is associated with cross-site scripting and clickjacking attacks due to misconfigured CSP.
Which software versions are affected by CVE-2025-31969?
The HCL Unica Platform is affected by CVE-2025-31969, specifically related to its Content Security Policy configuration.
How can I verify if my HCL Unica Platform is vulnerable to CVE-2025-31969?
You can verify vulnerability to CVE-2025-31969 by checking the Content Security Policy settings in your HCL Unica Platform configuration.