CVE-2025-31997: Hcltech Unica Centralized Offer Management

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL Unica Centralized Offer Management is vulnerable to Insecure Direct Object References (IDOR). An attacker can bypass authorization and access resources in the system directly, for example database records or files.

Affected products

• Hcltech Unica Centralized Offer Management: before 25.1.0.1 (fixed in 25.1.0.1)

Published 2025-10-12. Last modified 2026-10-08.