Hcltech Unica Audience Central vulnerabilities

2 CVEs affecting Hcltech Unica Audience Central, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-62320, published 2026-03-17.

More from Hcltech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-62319, published 2026-03-16. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Boolean-Based SQL Injection is a type of blind SQL injection where an attacker manipulates SQL queries by injecting Boolean conditions (TRUE or FALSE) into application input fields. Instead of…
• CVE-2025-62320, published 2026-03-17. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage. Because of this, an attacker may insert unwanted HTML…