CVE-2025-31992

HCL Unica MaxAI Assistant is susceptible to a HTML injection vulnerability. An attacker could insert special characters that are processed client-side in the context of the user's session.

Score

CVSS 3.1 4.6 Medium

Status

Deferred - psirt@hcl.com

Published

2025-10-12

Last modified

2026-10-08

Weaknesses

CWE-80

Affected products

• Maxai Assistant (Hcl Software)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124424