# Hcltech Unica vulnerabilities

Source: https://junglewise.ai/threats/technologies/unica  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/unica.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 11 vulnerabilities in Hcltech Unica: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2025-62320, was published on 17 March 2026.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 11 (1 critical, 0 exploited in the wild)

## About Hcltech Unica

Marketing automation platform for creating and managing customer campaigns across multiple channels.

## Latest Hcltech Unica vulnerabilities

- [CVE-2025-62320: HCL Unica HTML injection in web interface](https://junglewise.ai/threats/cve-2025-62320-hcl-unica-html-injection-in-web-interface) (medium, CVSS 4.7, published 17 Mar 2026)
- [CVE-2025-62319: HCL Unica blind SQL injection in backend configuration queries](https://junglewise.ai/threats/cve-2025-62319-hcl-unica-blind-sql-injection-in-backend-configuration-queries) (critical, CVSS 9.8, published 16 Mar 2026)
- [CVE-2025-51736: File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0.](https://junglewise.ai/threats/cve-2025-51736-file-upload-vulnerability-in-hcl-technologies-ltd-unica-12-0-0) (medium, CVSS 6.3, published 28 Nov 2025)
- [CVE-2025-51735: CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0.](https://junglewise.ai/threats/cve-2025-51735-csv-formula-injection-vulnerability-in-hcl-technologies-ltd-unica) (high, CVSS 7.5, published 28 Nov 2025)
- [CVE-2025-51734: Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd. Unica 12.0.0.](https://junglewise.ai/threats/cve-2025-51734-cross-site-scripting-xss-vulnerability-in-hcl-technologies-ltd) (medium, CVSS 5.4, published 28 Nov 2025)
- [CVE-2025-51733: Cross-Site Request Forgery (CSRF) vulnerability in HCL Technologies Ltd. Unica 12.0.0.](https://junglewise.ai/threats/cve-2025-51733-cross-site-request-forgery-csrf-vulnerability-in-hcl-technologies) (medium, CVSS 5.5, published 28 Nov 2025)
- [CVE-2025-31996: HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive…](https://junglewise.ai/threats/cve-2025-31996-hcl-unica-platform-is-affected-by-unprotected-files-due-to) (medium, CVSS 5.3, published 13 Oct 2025)
- [CVE-2025-52615: HCL Unica Platform is impacted by misconfigured security related HTTP headers. This can lead to less secure browser…](https://junglewise.ai/threats/cve-2025-52615-hcl-unica-platform-is-impacted-by-misconfigured-security-related) (low, CVSS 3.5, published 12 Oct 2025)
- [CVE-2025-52614: HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability. A malicious agent may be able to…](https://junglewise.ai/threats/cve-2025-52614-hcl-unica-platform-is-affected-by-a-cookie-without-httponly-flag) (low, CVSS 3.5, published 12 Oct 2025)
- [CVE-2025-31969: HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources…](https://junglewise.ai/threats/cve-2025-31969-hcl-unica-platform-is-impacted-by-misconfigured-content-security) (medium, CVSS 4, published 12 Oct 2025)
- [CVE-2025-52616: HCL Unica 12.1.10 can expose sensitive system information. An attacker could use this information to form an attack…](https://junglewise.ai/threats/cve-2025-52616-hcl-unica-12-1-10-can-expose-sensitive-system-information-an) (medium, CVSS 5.3, published 12 Oct 2025)

## Most severe Hcltech Unica vulnerabilities

- [CVE-2025-62319: HCL Unica blind SQL injection in backend configuration queries](https://junglewise.ai/threats/cve-2025-62319-hcl-unica-blind-sql-injection-in-backend-configuration-queries) (critical, CVSS 9.8, published 16 Mar 2026)
- [CVE-2025-51735: CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0.](https://junglewise.ai/threats/cve-2025-51735-csv-formula-injection-vulnerability-in-hcl-technologies-ltd-unica) (high, CVSS 7.5, published 28 Nov 2025)
- [CVE-2025-51736: File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0.](https://junglewise.ai/threats/cve-2025-51736-file-upload-vulnerability-in-hcl-technologies-ltd-unica-12-0-0) (medium, CVSS 6.3, published 28 Nov 2025)
- [CVE-2025-51733: Cross-Site Request Forgery (CSRF) vulnerability in HCL Technologies Ltd. Unica 12.0.0.](https://junglewise.ai/threats/cve-2025-51733-cross-site-request-forgery-csrf-vulnerability-in-hcl-technologies) (medium, CVSS 5.5, published 28 Nov 2025)
- [CVE-2025-51734: Cross-site scripting (XSS) vulnerability in HCL Technologies Ltd. Unica 12.0.0.](https://junglewise.ai/threats/cve-2025-51734-cross-site-scripting-xss-vulnerability-in-hcl-technologies-ltd) (medium, CVSS 5.4, published 28 Nov 2025)
- [CVE-2025-52616: HCL Unica 12.1.10 can expose sensitive system information. An attacker could use this information to form an attack…](https://junglewise.ai/threats/cve-2025-52616-hcl-unica-12-1-10-can-expose-sensitive-system-information-an) (medium, CVSS 5.3, published 12 Oct 2025)
- [CVE-2025-31996: HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive…](https://junglewise.ai/threats/cve-2025-31996-hcl-unica-platform-is-affected-by-unprotected-files-due-to) (medium, CVSS 5.3, published 13 Oct 2025)
- [CVE-2025-62320: HCL Unica HTML injection in web interface](https://junglewise.ai/threats/cve-2025-62320-hcl-unica-html-injection-in-web-interface) (medium, CVSS 4.7, published 17 Mar 2026)
- [CVE-2025-31969: HCL Unica Platform is impacted by misconfigured Content Security Policy (CSP). These can result in malicious resources…](https://junglewise.ai/threats/cve-2025-31969-hcl-unica-platform-is-impacted-by-misconfigured-content-security) (medium, CVSS 4, published 12 Oct 2025)
- [CVE-2025-52615: HCL Unica Platform is impacted by misconfigured security related HTTP headers. This can lead to less secure browser…](https://junglewise.ai/threats/cve-2025-52615-hcl-unica-platform-is-impacted-by-misconfigured-security-related) (low, CVSS 3.5, published 12 Oct 2025)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Hcltech technologies

- [Hcltech Bigfix Service Management](https://junglewise.ai/threats/technologies/bigfix-service-management): 13 vulnerabilities
- [Hcltech Aion](https://junglewise.ai/threats/technologies/hcltech-aion): 8 vulnerabilities
- [Hcltech Dfxanalytics](https://junglewise.ai/threats/technologies/hcltech-dfxanalytics): 5 vulnerabilities
- [Hcltech Bigfix Modern Client Management](https://junglewise.ai/threats/technologies/bigfix-modern-client-management): 4 vulnerabilities
- [Hcltech Bigfix Mobile](https://junglewise.ai/threats/technologies/hcltech-bigfix-mobile): 4 vulnerabilities
- [Hcltech Bigfix Insights For Vulnerability Remediation](https://junglewise.ai/threats/technologies/bigfix-insights-for-vulnerability-remediation): 3 vulnerabilities
- [Hcltech Unica Centralized Offer Management](https://junglewise.ai/threats/technologies/unica-centralized-offer-management): 3 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Hcltech Unica vulnerabilities", https://junglewise.ai/threats/technologies/unica, 9 November 2026.