CVE-2024-42210: Hcltech Unica

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A Stored cross-site scripting (XSS) vulnerability affects HCL Unica Marketing Operations v12.1.8 and lower.  Stored cross-site scripting (also known as second-order or persistent XSS) arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way.

Affected products

• Hcltech Unica: before 12.1.9 (fixed in 12.1.9)

Published 2026-03-19. Last modified 2026-06-17.