CVE-2025-31998

Katalog CVE

CVSS 9.8 · Critical EPSS 0,39%

Kerentanan Generation of Error Message Containing Sensitive Information pada hcltech unica centralized offer management. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.

Rincian

Terbit di NVD

12 Oktober 2025

Terakhir diubah

8 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-209: Generation of Error Message Containing Sensitive Information
CWE-703: Improper Check or Handling of Exceptional Conditions

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 31,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124422 advisory vendor