CVE-2025-31997

Publication date

2025-10-12 02:27:25

Family

HCL

State

PUBLISHED

Description

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.