CVE-2025-31995

LOW

HCL Unica MaxAI Workbench - Improper Input Validation

Title source: llm

Description

HCL Unica MaxAI Workbench is vulnerable to improper input validation. This allows attackers to exploit vulnerabilities such as SQL Injection, XSS, or command injection, leading to unauthorized access or data breaches, etc.

References (1)

Core 1

Core References

Various Sources

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124425

Scores

CVSS v3 3.5

EPSS 0.0050

EPSS Percentile 39.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-20

Status published

Products (1)

HCL Software/MaxAI Workbench v12.1.10 - v25.1

Published Oct 13, 2025

Tracked Since Feb 18, 2026