CVE-2025-31998: Hcltech Unica Centralized Offer Management

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.

Affected products

• Hcltech Unica Centralized Offer Management: before 25.1.0.1 (fixed in 25.1.0.1)

Published 2025-10-12. Last modified 2026-10-08.