Unica Centralized Offer Management
Monthly
Information disclosure in HCL Unica Centralized Offer Management allows unauthenticated remote attackers to obtain sensitive details through unhandled exception messages, because the application returns verbose error or stack-trace output to clients. The published CVSS is 9.8 Critical, but independent assessment scopes the direct impact to confidentiality only (C:H/I:N/A:N); any follow-on remote code execution or denial of service is contingent on the leaked information revealing a separately exploitable flaw in the target's specific version and stack. No public exploit identified at time of analysis; CISA KEV status is not indicated, and EPSS is low at 0.39% (31st percentile).
Authorization bypass in HCL Unica Centralized Offer Management allows a remote, authenticated user to read database records, offers, and files belonging to other users or tenants by manipulating the object identifiers the application accepts in requests. The impact is confined to confidentiality - no data modification or service disruption is documented - and exploitation requires only network reach to the application's HTTP interface plus a low-privileged session, with no user interaction. Exploitation is not confirmed as active (CISA KEV), no public exploit code has been identified at time of analysis, and EPSS is low at 0.22% (12th percentile), so real-world priority sits below the 7.5 CVSS base score.
Server-side request forgery in HCL Unica Centralized Offer Management lets unauthenticated, remote attackers steer the application server into issuing requests to attacker-chosen URLs or internal hosts, exposing internal services, management interfaces, or cloud metadata endpoints reachable from the server. The vendor rates this 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), but the independent assessment (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) treats only confidentiality as high, with limited integrity effect and no availability impact, so the signals are divergent and a tempered priority is warranted rather than treating the 9.8 at face value. Exploitation status is no public exploit identified at time of analysis, EPSS is low at 0.24% (~14th percentile), and there is no evidence of confirmed actively exploited (CISA KEV) activity.
Information disclosure in HCL Unica Centralized Offer Management allows unauthenticated remote attackers to obtain sensitive details through unhandled exception messages, because the application returns verbose error or stack-trace output to clients. The published CVSS is 9.8 Critical, but independent assessment scopes the direct impact to confidentiality only (C:H/I:N/A:N); any follow-on remote code execution or denial of service is contingent on the leaked information revealing a separately exploitable flaw in the target's specific version and stack. No public exploit identified at time of analysis; CISA KEV status is not indicated, and EPSS is low at 0.39% (31st percentile).
Authorization bypass in HCL Unica Centralized Offer Management allows a remote, authenticated user to read database records, offers, and files belonging to other users or tenants by manipulating the object identifiers the application accepts in requests. The impact is confined to confidentiality - no data modification or service disruption is documented - and exploitation requires only network reach to the application's HTTP interface plus a low-privileged session, with no user interaction. Exploitation is not confirmed as active (CISA KEV), no public exploit code has been identified at time of analysis, and EPSS is low at 0.22% (12th percentile), so real-world priority sits below the 7.5 CVSS base score.
Server-side request forgery in HCL Unica Centralized Offer Management lets unauthenticated, remote attackers steer the application server into issuing requests to attacker-chosen URLs or internal hosts, exposing internal services, management interfaces, or cloud metadata endpoints reachable from the server. The vendor rates this 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), but the independent assessment (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N) treats only confidentiality as high, with limited integrity effect and no availability impact, so the signals are divergent and a tempered priority is warranted rather than treating the 9.8 at face value. Exploitation status is no public exploit identified at time of analysis, EPSS is low at 0.24% (~14th percentile), and there is no evidence of confirmed actively exploited (CISA KEV) activity.