Unica MaxAI Workbench CVE-2025-31995
LOWAttack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as low-privileged Workbench user
-
DeliverySubmit crafted input to unvalidated field
-
ExploitReflected payload returned to victim
-
ExecutionVictim views content, script executes in session
-
ImpactLimited integrity impact / session actions
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V2 - Validation and Business Logic Input validation, allowlisting
|
| Exploitation Conditions | Requires an authenticated low-privileged account on the HCL Unica MaxAI Workbench (PR:L) and victim user interaction (UI:R) - the attacker submits malicious input to an inadequately validated field, and a second user must view the reflected content for the client-side payload to fire. Limiting factors: no anonymous/unauthenticated path, the per-vector impact is confined to limited integrity (C:N/I:L/A:N) consistent with reflected XSS rather than the server-side SQLi/command injection suggested by the description, and the component is a niche AI add-on within the Unica marketing suite. The description's broader claims (SQLi/command injection → data breach) are not supported by the scored vector and should not be assumed exploitable without vendor confirmation. |
| Impact | This is a low-priority issue despite the alarming description. The vendor (HCL PSIRT) assigned CVSS 3.1 base 3.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N), which models a minor integrity-only impact requiring an authenticated low-privileged user and victim interaction - consistent with a reflected client-side injection (XSS) rather than full server-side compromise. There is a notable INTERNAL CONFLICT: the free-text description claims the input-validation flaw could enable 'SQL Injection, XSS, or command injection, leading to unauthorized access or data breaches,' which would imply C:H/I:H/A:H, yet the vendor's own vector sets C:N/I:L/A:N - strongly suggesting the SQLi/command-injection language is boilerplate enumeration of CWE-20 possibilities, not confirmed exploitable paths in this product. Treat the low vector as the authoritative signal and the description as aspirational worst-case. EPSS is 0.50% (40th percentile) - modest and consistent with a low-impact, auth-gated bug. There is no CISA KEV listing and no public exploit code. SSVC-style reading: exploitation none, not automatable (requires auth + user interaction), technical impact partial. Net: not a drop-everything priority; patch during normal cycles. Verify the true impact ceiling with HCL, because the description's command-injection/SQLi wording contradicts the scored vector. |
| Exploit ScenarioDerived | An authenticated low-privileged user of the HCL Unica MaxAI Workbench submits crafted input into an inadequately validated field; the payload is reflected back and executes in another authenticated user's browser session (reflected XSS) when that user is lured into viewing the crafted content. No public exploit code or active exploitation is identified; successful attack requires an existing account and victim interaction (UI:R). |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 01, 2026
Improper input validation (CWE-20) in HCL Unica MaxAI Workbench, the AI component within HCL's Unica marketing suite, lets an authenticated low-privileged user plant crafted input in a field that is later rendered to a second user, resulting in reflected cross-site scripting rather than the server-side SQL injection or command injection implied by the vendor's generic description. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N, base 3.5) limits the demonstrated impact to partial integrity loss with no confidentiality or availability effect, and exploitation requires both a valid low-privileged account and victim user interaction. Risk is low: EPSS is 0.50 percent (40th percentile), no publicly available exploit code and no CISA KEV entry were identified at time of analysis, and the breadth of the advisory text is not supported by the scored vector.
RemediationAI
The provided data does not include an exact fixed version for CVE-2025-31995, so the first step is to consult HCL's advisory KB0124425 at https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124425 for the vendor-released patched build of Unica MaxAI Workbench and apply it as soon as it is available; this issue does not warrant emergency off-hours change windows given the low base score and lack of public exploit code, but it should be folded into normal patch cycles. Until the fix can be applied, restrict MaxAI Workbench access to the smallest set of trusted, verified accounts and remove or disable dormant and shared accounts, which directly addresses the PR:L prerequisite and reduces the pool of users who could both inject and view crafted content (trade-off: reduced operational flexibility and possible user complaints). Enforce a Content Security Policy that disallows inline and third-party script on the workbench host, and ensure output encoding is applied to any user-supplied field that is reflected back into the UI; this blocks the reflected XSS payload class described above at the cost of potentially breaking legitimate embedded scripts or widgets, so validate business-critical UI behavior before enforcing in production. Additionally, monitor the workbench web logs for script tags, encoded payloads, or unusual parameter values in requests originating from low-privileged accounts, and instruct users not to follow links into the workbench from untrusted sources, mitigating the UI:R requirement since a victim must interact with the crafted content for the payload to execute.
Affected ProductsAI
HCL Unica MaxAI Workbench is the affected component, an AI add-on within the HCL Unica marketing platform. The provided intelligence does not include a CPE identifier, a version range, or a specific affected release number, so the exact vulnerable builds cannot be enumerated here; the vendor advisory KB0124425 (https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124425), published by HCL's PSIRT (psirt@hcl.com), is the authoritative source for the affected and fixed versions. Deployments of Unica that include the MaxAI Workbench module and expose it to authenticated users over the network should be treated as potentially in scope, while standalone Unica components without the MaxAI Workbench add-on are not indicated as affected by this issue.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The root cause class is CWE-20, improper input validation, in HCL Unica MaxAI Workbench. The advisory tags list XSS, SQL injection, command injection and authentication bypass, but those labels reflect the vendor's generic wording rather than the scored behavior; the assessed CVSS vector (AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) is characteristic of reflected cross-site scripting, where attacker-supplied content is stored or reflected by the workbench and later executed in the browser of a different authenticated user. Because the vector carries PR:L, exploitation is not anonymous: an attacker must first hold a low-privileged account on the workbench, and the UI:R component means a second user must interact with or view the crafted content for the payload to fire. True SQL injection or OS command injection would normally produce a scope/confidentiality/availability impact (typically C:H/I:H/A:H) that the assigned score does not show, so those outcomes should not be assumed exploitable without explicit vendor confirmation. No CPE strings were supplied with the feed, so the precise affected release train cannot be enumerated from the available data; the sole authoritative reference is HCL's knowledge-base advisory KB0124425 at https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124425.
Know when Hcl gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Aligns with vendor vector: authenticated low-priv user (PR:L) plus required victim interaction (UI:R) yields reflected-XSS-style limited integrity impact (I:L), no confidentiality/availability.
Primary rating from Vendor (hcl).
CVSS VectorVendor: hcl
DescriptionCVE.org
HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to exploit vulnerabilities such as SQL Injection, XSS, or command injection, leading to unauthorized access or data breaches, etc.
Threat Intelligence Overview
NVD
CVE.org
EPSS
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
SQL injection exploits the way applications construct database queries by mixing user input directly into SQL statements.
Cross-Site Scripting occurs when an application accepts untrusted data and sends it to a web browser without proper validation or encoding.
OS command injection occurs when an application passes unsanitized user input directly into system shell commands.
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Information disclosure in HCL Unica Centralized Offer Management allows unauthenticated remote attackers to obtain sensi
SQL injection and cross-tenant data exposure flaws in HCL BigFix Service Management allow an attacker who can reach the
HCL DFXAnalytics 3.1 and earlier ship with outdated third-party libraries or sub-components that carry publicly known vu
A Boolean-based SQL injection vulnerability exists in HCL Unica that allows remote attackers to manipulate backend datab
HCL DFXAnalytics 3.1 and earlier transmit sensitive data across the network without transport encryption, allowing anyon
Command injection in HCL BigFix RunBookAI 11.2 allows authenticated remote attackers to execute arbitrary operating syst
HCL BigFix Service Management (SM) version 23 ships with an outdated, vulnerable WSGI (Web Server Gateway Interface) ser
HCL BigFix Service Management (SX) is affected by a Broken Access Control vulnerability leading to privilege escalation.
SQL injection in HCL Aftermarket DPC version 1.0.0 enables unauthenticated remote attackers to extract sensitive databas
Broken access control in HCL BigFix Service Management lets a low-privileged authenticated user reach administrative scr
Content Security Policy weakness in HCL Hive Telco Observability's Keycloak authentication component allows remote attac
Missing functional level access control in HCL Aftermarket DPC version 1.0.0 enables privilege escalation attacks that c
GitHub PoC
Exploit-DB