CVE-2025-62320 - CVE House
Back to Database
Status published Medium CVE-2025-62320

HTML Injection Leading to Data Exfiltration to External Server vulnerability affects HCL Unica Platform

Vulnerability Description

HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage. Because of this, an attacker may insert unwanted HTML code into the page. When the browser loads the page, it may automatically interact with external resources included in that HTML, which can cause unexpected requests from the user’s browser.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-62320

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Sametime
Vulnerable Versions:
version 25.1.1 and below.

Timeline

Official Publish: March 17th, 2026
Last Modified: March 17th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Weaknesses (CWE)