{"cve":{"cve_id":"CVE-2025-31969","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.0015,"epss_percentile":0.04499,"epss_as_of":"2026-06-23","description":"HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP).  These can result in malicious resources getting loaded and browsers may come across certain types of attacks, such as cross-site scripting and clickjacking.","published_at":"2025-10-12T07:37:24.785000Z","last_modified_at":null,"cvss_v3_score":4.0,"cvss_v3_vector":"CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:L","cvss_v3_severity":"MEDIUM","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":["CWE-358"],"nvd_references":["https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124417"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-28T23:26:24.025879Z"},"effective_severity":"MEDIUM","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"A","value_label":"Adjacent"},{"metric":"AC","name":"Attack Complexity","value":"H","value_label":"High"},{"metric":"PR","name":"Privileges Required","value":"H","value_label":"High"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"C","value_label":"Changed"},{"metric":"C","name":"Confidentiality","value":"L","value_label":"Low"},{"metric":"I","name":"Integrity","value":"N","value_label":"None"},{"metric":"A","name":"Availability","value":"L","value_label":"Low"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"hcl-software","vendor_name":"HCL Software","product_slug":"unica-platform","product_name":"Unica Platform","version_start":"<= 25.1","version_start_inclusive":true,"version_end":"<= 25.1","version_end_inclusive":true,"cpe23_uri":"cve5:hcl-software:unica-platform:<= 25.1:<= 25.1"}],"exploit_refs":[],"news":[],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124417","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2025-10-12T07:37:24.785000Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-06-28T17:44:54.952793Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:44:54.952793Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:44:54.952793Z","label":"CVSS score revised","source":"cvelistv5"}]}