CVE-2025-31992

MEDIUM EPSS 5.4%

Published Oct 12, 20258mo ago · Modified Jun 17, 20262w ago

4.6 CVSS 3.1

Medium

Published Oct 12, 2025 8mo ago

Last Modified Jun 17, 2026 2w ago

Description

HCL Unica MaxAI Assistant is susceptible to a HTML injection vulnerability. An attacker could insert special characters that are processed client-side in the context of the user's session.

CVSS Details

Base Score

4.6

Exploitability

2.1

Impact

2.5

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction Required

Scope Unchanged

Confidentiality Low

Integrity Low

Availability None

Threat Intelligence

EPSS Exploit Probability

5.4% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-80

References 1

support.hcl-software.com https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124424

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.