CVE-2025-31992: HCL MaxAI Assistant is susceptible to a HTML injection vulnerability

Published Oct 12, 2025

Updated

HCL Unica MaxAI Assistant is susceptible to a HTML injection vulnerability. An attacker could insert special characters that are processed client-side in the context of the user's session.

Affected Software

1 affected component

HCL MaxAI Assistant

Event History

Oct 12, 2025

CVE Published

via MITRE·05:57 AM

Data Sourced

via MITRE·05:57 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-31992?

CVE-2025-31992 has been classified with a medium severity rating due to its potential for HTML injection attacks.

How do I fix CVE-2025-31992?

To fix CVE-2025-31992, users should update to the latest version of HCL MaxAI Assistant that includes patches for this vulnerability.

What kind of attacks can CVE-2025-31992 enable?

CVE-2025-31992 can enable attackers to perform client-side HTML injection, potentially compromising user data or session integrity.

Who is affected by CVE-2025-31992?

The vulnerability impacts users of HCL MaxAI Assistant that have not applied security updates addressing this HTML injection flaw.

Is CVE-2025-31992 easily exploitable?

Yes, CVE-2025-31992 can be easily exploited if an attacker can craft malicious inputs that are processed by the affected application.