---
id: CVE-2025-31996
title: >-
  HCL Unica Platform is affected by unprotected files due to improper access
  controls
summary: "HCL Unica Platform is affected by unprotected files due to improper access controls.  \_These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, …"
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N'
cwe:
  - CWE-552
vendor: hcltech
product: unica
affected:
  - unica < 25.1.0.1
patched:
  - unica 25.1.0.1
published: '2025-10-13'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T12:10:00.217'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-31996'
references:
  - url: >-
      https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124418
    label: psirt@hcl.com
tags:
  - nvd
epss: 0.00242
epssPercentile: 0.14084
ingestedAt: '2026-10-08T11:31:27.346Z'
---

## Overview

HCL Unica Platform is affected by unprotected files due to improper access controls.   These files may contain sensitive information such as private or system information that can be exploited by attackers to compromise the application, infrastructure, or users.

## Affected

- `unica < 25.1.0.1`

## Remediation

Upgrade past the affected range:

- `unica 25.1.0.1`