HCL Unica Marketing Operations Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in HCL Unica Marketing Operations versions 12.1.8 and earlier. This vulnerability allows an attacker to inject malicious scripts that are stored and executed in the context of the user.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Remediation

Users can upgrade to HCL Unica Marketing Operations version 12.1.9 or later to address this vulnerability. The update is available through the My HCLSoftware Portal.