Fiche vulnérabilité
CVE-2025-62320 : faille moyenne hcltech unica (CVSS 6.1)
Description
HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage. Because of this, an attacker may insert unwanted HTML code into the page. When the browser loads the page, it may automatically interact with external resources included in that HTML, which can cause unexpected requests from the user’s browser.
En bref
- Sévérité
- Moyenne (CVSS 6.1)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Exploitation active
- Non signalée par la CISA
- Publication
- 17 mars 2026
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- hcltech unica
- hcltech unica audience central
- hcltech unica campaign
- hcltech unica centralised offer management
- hcltech unica contact central
- hcltech unica interact
- hcltech unica journey
- hcltech unica plan
- hcltech unica segment central