← Database

CVE-2025-31997

MEDIUM CVSS: 4.2 Published: 2025-10-12 Modified: 2026-06-17

Description

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.

Affected Platforms

Hcltech Unica Centralized Offer Management

Weakness Type

CWE-639

References