CVE-2025-62319: Boolean-Based SQL Injection in Multiple Unica Components
Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions (TRUE or FALSE) into application input fields. Instead of returning database errors or visible data, the application responds differently depending on whether the injected condition evaluates to true or false. This allows an attacker to inject arbitrary SQL into backend configuration queries executed within the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62319?
CVE-2025-62319 has a critical severity rating of 9.8.
What types of applications are affected by CVE-2025-62319?
CVE-2025-62319 affects multiple components of HCL Tech's Unica platform, including Unica Audience Central.
How does CVE-2025-62319 operate?
CVE-2025-62319 operates as a Boolean-Based SQL Injection, manipulating SQL queries through injected Boolean conditions.
What are the potential impacts of CVE-2025-62319?
CVE-2025-62319 can lead to unauthorized access to sensitive data through successful SQL injection attacks.
How can I remediate CVE-2025-62319?
To remediate CVE-2025-62319, it is essential to sanitize and validate all user inputs and use parameterized queries.