What is CVE-2025-31998?

CVE-2025-31998 is a low-severity vulnerability in Hcl Software Unica Centralized Offer Management, classified under Generation of Error Message Containing Sensitive Information. CVSS score: 3.5/10. Published 2025-10-12.

How severe is CVE-2025-31998?

Low severity. CVSS v3 base score is 3.5 out of 10.

Information disclosure in Hcl Software Unica Centralized Offer Management

CVE-2025-31998

HCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information. An attacker can exploit use this information to exploit known vulnerabilities launch targeted attacks, such as remote code execution or denial of service.

EPSS: 0.004 (29.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N.

Affected products

Hcl Software Unica Centralized Offer Management — versions <=25.1
Hcltech Unica_centralized_offer_management

Weakness classification (CWE)

References

psirt@hcl.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-31998?: CVE-2025-31998 is a low-severity vulnerability in Hcl Software Unica Centralized Offer Management, classified under Generation of Error Message Containing Sensitive Information. CVSS score: 3.5/10. Published 2025-10-12.
How severe is CVE-2025-31998?: Low severity. CVSS v3 base score is 3.5 out of 10.