HCL Unica Platform vulnerabilities
1 known vulnerability in HCL Unica Platform from HCL Software. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
HCL Unica Platform: Improper Restriction of XML External Entity Reference
The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can successfully perform XML External Entity attacks (XXE) against the backend service.