Unica vulnerabilities
3 known vulnerabilities in Unica from HCL Software. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Unica Platform: Files or Directories Accessible to External Parties
HCL Unica Platform is affected by unprotected files due to improper access controls. These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users.
- 7.5 High severity
Unica: Exposure of Sensitive System Information to an Unauthorized Control Sphere
HCL Unica 12.1.10 can expose sensitive system information. An attacker could use this information to form an attack plan by leveraging known vulnerabilities in the application.
- 8.8 High severity
HCL Unica Platform: Improper Restriction of XML External Entity Reference
The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certain rights can successfully perform XML External Entity attacks (XXE) against the backend service.