Medium severity4.6NVD Advisory· Published Oct 12, 2025· Updated Apr 15, 2026

CVE-2025-31992

Description

HCL Unica MaxAI Assistant is susceptible to a HTML injection vulnerability. An attacker could insert special characters that are processed client-side in the context of the user's session.

Affected products

HCL Software/Unica MaxAI Assistantllm-create

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvd

News mentions

No linked articles in our index yet.

cvss	0.299
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000