CVE-2025-62320

mediumpriority · track · 24EPSS 0.002 · 6 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.16% (6th) EPSS

CVSS 6.1 · medium

Is it mine?

19 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage. Because of this, an attacker may insert unwanted HTML code into the page. When the browser loads the page, it may automatically interact with external resources included in that HTML, which can cause unexpected requests from the user’s browser.

cvss

Technical severity, 0–10. One row per scoring source.

6.1

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.16.1mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:Nprimary · NVD / NIST USexploitability 2.8 · impact 2.7

v3.14.7mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:Nsecondary · ENISA EU

v3.14.7mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:Nsecondary · psirt@hcl.comexploitability 2.8 · impact 1.4

v3.15.6mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-79US

affected products (19)

Products and version ranges known to be affected.

HCL Sametime≤ version 25.1.1 and below.enisa_euvdEU
hcltech unica< 12.1.11nvdUScpe:2.3:a:hcltech:unica:*:*:*:*:*:*:*:*
hcltech unica25.1.0 → 25.1.1.0.1nvdUScpe:2.3:a:hcltech:unica:*:*:*:*:*:*:*:*
hcltech unica audience central< 12.1.11nvdUScpe:2.3:a:hcltech:unica_audience_central:*:*:*:*:*:*:*:*
hcltech unica audience central25.1.0 → 25.1.1.0.1nvdUScpe:2.3:a:hcltech:unica_audience_central:*:*:*:*:*:*:*:*
hcltech unica campaign< 12.1.11nvdUScpe:2.3:a:hcltech:unica_campaign:*:*:*:*:*:*:*:*
hcltech unica campaign25.1.0 → 25.1.1.0.1nvdUScpe:2.3:a:hcltech:unica_campaign:*:*:*:*:*:*:*:*
hcltech unica centralised offer management< 12.1.11nvdUScpe:2.3:a:hcltech:unica_centralised_offer_management:*:*:*:*:*:*:*:*
hcltech unica centralised offer management25.1.0 → 25.1.1.0.1nvdUScpe:2.3:a:hcltech:unica_centralised_offer_management:*:*:*:*:*:*:*:*
hcltech unica contact central< 12.1.11nvdUScpe:2.3:a:hcltech:unica_contact_central:*:*:*:*:*:*:*:*
hcltech unica contact central25.1.0 → 25.1.1.0.1nvdUScpe:2.3:a:hcltech:unica_contact_central:*:*:*:*:*:*:*:*
hcltech unica interact< 12.1.11nvdUScpe:2.3:a:hcltech:unica_interact:*:*:*:*:*:*:*:*
hcltech unica interact25.1.0 → 25.1.1.0.1nvdUScpe:2.3:a:hcltech:unica_interact:*:*:*:*:*:*:*:*
hcltech unica journey< 12.1.11nvdUScpe:2.3:a:hcltech:unica_journey:*:*:*:*:*:*:*:*
hcltech unica journey25.1.0 → 25.1.1.0.1nvdUScpe:2.3:a:hcltech:unica_journey:*:*:*:*:*:*:*:*
hcltech unica plan< 12.1.11nvdUScpe:2.3:a:hcltech:unica_plan:*:*:*:*:*:*:*:*
hcltech unica plan25.1.0 → 25.1.1.0.1nvdUScpe:2.3:a:hcltech:unica_plan:*:*:*:*:*:*:*:*
hcltech unica segment central< 12.1.11nvdUScpe:2.3:a:hcltech:unica_segment_central:*:*:*:*:*:*:*:*
hcltech unica segment central25.1.0 → 25.1.1.0.1nvdUScpe:2.3:a:hcltech:unica_segment_central:*:*:*:*:*:*:*:*

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2026-03-17modified 2026-06-17

references (3)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan