Security Advisory

CVE-2025-31997

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-12 02:27:25
Last updated 2025-10-14 14:53:48
Assigner HCL
State PUBLISHED

Description

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.