Skip to main content

Unica CVE-2025-51736

MEDIUM
Unrestricted Upload of File with Dangerous Type (CWE-434)
2025-11-28 cve@mitre.org
File Upload Unica
6.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.3 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Lifecycle Timeline

2
Analysis Generated
Mar 28, 2026 - 19:24 vuln.today
CVE Published
Nov 28, 2025 - 15:16 nvd
MEDIUM 6.3

DescriptionCVE.org

File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0.

AnalysisAI

File upload vulnerability in HCL Technologies Ltd. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Unrestricted File Upload (CWE-434), which allows attackers to upload malicious files that can be executed on the server. File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0. Affected products include: Hcltech Unica.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate file types server-side, store uploads outside webroot, use random filenames, scan for malware.

More in Unica

View all
CVE-2025-62319 CRITICAL
9.8 Mar 16

A Boolean-based SQL injection vulnerability exists in HCL Unica that allows remote attackers to manipulate backend datab
CVE-2023-37498 HIGH
8.8 Aug 03

A user is capable of assigning him/herself to arbitrary groups by reusing a POST request issued by an administrator. Rat
CVE-2023-37497 HIGH
8.8 Aug 03

The Unica application exposes an API which accepts arbitrary XML input. Rated high severity (CVSS 8.8), this vulnerabili
CVE-2025-51735 HIGH
7.5 Nov 28

CSV formula injection vulnerability in HCL Technologies Ltd. Rated high severity (CVSS 7.5), this vulnerability is remot
CVE-2023-37501 MEDIUM
6.1 Aug 03

A Persistent XSS vulnerability can be carried out in a certain field of Unica Campaign. Rated medium severity (CVSS 6.1)
CVE-2023-37500 MEDIUM
6.1 Aug 03

A Persistent Cross-site Scripting (XSS) vulnerability can be carried out on certain pages of Unica Platform. Rated mediu
CVE-2023-37499 MEDIUM
6.1 Aug 03

A Persistent Cross-site Scripting (XSS) vulnerability can be carried out in a certain field of the Unica Platform. Rated
CVE-2025-51733 MEDIUM
5.5 Nov 28

Cross-Site Request Forgery (CSRF) vulnerability in HCL Technologies Ltd. Rated medium severity (CVSS 5.5), this vulnerab
CVE-2025-51734 MEDIUM
5.4 Nov 28

Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd. Rated medium severity (CVSS 5.4), this vulnerability i

Same weakness CWE-434 – Unrestricted Upload of File with Dangerous Type

View all
CVE-2016-3088 CRITICAL POC
9.8
CVE-2021-31207 MEDIUM POC
6.6
CVE-2017-12617 HIGH POC
8.1
CVE-2017-11357 CRITICAL POC
9.8
CVE-2017-12615 HIGH POC
8.1
CVE-2024-5084 CRITICAL POC
9.8
CVE-2020-36847 CRITICAL POC
9.8
CVE-2017-6090 HIGH POC
8.8

Same technique File Upload

View all
CVE-2016-3088 CRITICAL POC
9.8
CVE-2017-12617 HIGH POC
8.1
CVE-2017-11357 CRITICAL POC
9.8
CVE-2017-12615 HIGH POC
8.1
CVE-2024-5084 CRITICAL POC
9.8
CVE-2016-6600 CRITICAL POC
9.8
CVE-2017-6090 HIGH POC
8.8
CVE-2015-8249 CRITICAL POC
9.8

Share

CVE-2025-51736 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy