CVE-2025-52614: HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability
HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to induce this event by feeding a user suitable links, either directly or via another web site.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52614?
CVE-2025-52614 is classified as a medium severity vulnerability due to the potential for session hijacking.
How do I fix CVE-2025-52614?
To fix CVE-2025-52614, ensure that the application sets the HTTPOnly flag on cookies to prevent access via JavaScript.
What are the risks associated with CVE-2025-52614?
The risks associated with CVE-2025-52614 include session hijacking and possible unauthorized access to user accounts.
Which versions of HCL Unica Platform are affected by CVE-2025-52614?
CVE-2025-52614 affects all versions of HCL Unica Platform that do not set the HTTPOnly flag on cookies.
Is there a workaround for CVE-2025-52614 until a patch is available?
A potential workaround for CVE-2025-52614 is to manually audit and modify cookie settings to include the HTTPOnly flag.