HCL Unica Campaign Reflected Cross-Site Scripting Vulnerability
Vulnerability
A reflected cross-site scripting vulnerability has been identified in HCL Unica Campaign version 12.1.10 and earlier. This issue allows an attacker to inject malicious scripts into HTTP requests, which are then reflected in the server's immediate response to the victim's browser. As a result, the injected script is executed as if it originated from a trusted website.
Impact
Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute scripts in the context of the user's browser.
Remediation
Users are advised to upgrade to HCL Unica Campaign version 25.1.0 or higher.
Added: Oct 13, 2025, 4:18 AM
Updated: Oct 13, 2025, 4:18 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.7exploitability
6.4remediation
7.7relevance
0.7threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.