Hcl Unica Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:hcl_unica_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Hcl Unica Platform (1b72efca-3c45-5947-9d50-c137429c58cc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-37500 |
vulnerable | 2026-06-08 06:08:15.529075 |
A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform
HIGH (8.1)
A Persistent Cross-site Scripting (XSS) vulnerability can be carried out on certain pages of Unica Platform. An attacker could hijack a user's session and perform other attacks.
Published: 2023-08-03T21:51:45.461Z
Updated: 2024-09-27T21:57:37.608Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37499 |
vulnerable | 2026-06-08 06:08:15.528548 |
A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform
HIGH (8.1)
A Persistent Cross-site Scripting (XSS) vulnerability can be carried out in a certain field of the Unica Platform. An attacker could hijack a user's session and perform other attacks.
Published: 2023-08-03T21:38:49.220Z
Updated: 2024-09-27T21:57:44.313Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37498 |
vulnerable | 2026-06-08 06:08:15.528057 |
HCL Unica Platform is vulnerable to a privilege escalation by unauthorized group assignation
HIGH (8.1)
A user is capable of assigning him/herself to arbitrary groups by reusing a POST request issued by an administrator. It is possible that an attacker could potentially escalate their privileges.
Published: 2023-08-03T21:34:23.721Z
Updated: 2024-10-17T15:43:19.004Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37497 |
vulnerable | 2026-06-08 06:08:15.526757 |
An XML External Entity (XXE) Injection Vulnerability affects HCL Unica Platform
HIGH (8.1)
The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can successfully perform XML External Entity attacks (XXE) against the backend service.
Published: 2023-08-03T21:14:43.014Z
Updated: 2024-10-17T15:00:50.717Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.