עברית

Vulnerability Intelligence

CVE-2025-31995

Low 3.5

Published
Last modified
NVD status
Deferred

Description

HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to exploit vulnerabilities such as SQL Injection, XSS, or command injection, leading to unauthorized access or data breaches, etc.

References1

Metrics

CVSS 3.1
3.5 LOW Score source: CNA CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
EPSS — exploit probability
1% percentile: 43 · as of 9 November 2026
CWE
CWE-20

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.