NVD disclosure day
CVE-2025-61884
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in Oracle Configurator allows unauthenticated attackers to access critical data. This impacts organizations using Oracle E-Business Suite, posing a business risk of unauthorized data compromise. The CVSS score of 7.5 highlights the potential for significant data loss.
CVE-2025-31998
Halo Surface Signal: 3 out of 5 — possibly public-facing.
A vulnerability in HCL Unica Centralized Offer Management allows attackers to expose sensitive information via unhandled exceptions. This exposed data could be used for further attacks, such as remote code execution or denial of service. The platform is typically internal but requires network access for exploitation.
CVE-2025-31993
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A Server-Side Request Forgery vulnerability exists in HCL Unica Centralized Offer Management due to improper input validation. Attackers can exploit this by submitting crafted input, potentially causing the application to make unintended requests to internal or external resources. This could lead to exposed sensitive d