CVE-2025-51735

HighCVSS 7.5/10Last modified Oct 26, 2026

Description

CSV formula injection vulnerability in HCL Technologies Ltd. Unica 12.0.0.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1236

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Nov 28, 2025
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-517366.3File upload vulnerability in HCL Technologies Ltd. Unica 12.0.0.CVE-2025-51747.8A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of theCVE-2025-517417.5An issue was discovered in Veal98 Echo Open-Source Community System 2.2 thru 2.3 allowing an unauthenticated attacker to cause the server toCVE-2025-517429.8An issue was discovered in jishenghua JSH_ERP 2.3.1. The /material/getMaterialEnableSerialNumberList endpoint passes the search query parameCVE-2025-517439.8An issue was discovered in jishenghua JSH_ERP 2.3.1. The /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deserializCVE-2025-517449.8An issue was discovered in jishenghua JSH_ERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks.CVE-2025-517459.8An issue was discovered in jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks.CVE-2025-517469.8An issue was discovered in jishenghua JSH_ERP 2.3.1. The /serialNumber/addSerialNumber endpoint is vulnerable to fastjson deserialization atCVE-2025-51755.5A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pCVE-2025-51769.1A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been declared as critical. This vulnerability affecCVE-2025-51774.7A vulnerability was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. It has been rated as problematic. This issue affects some CVE-2025-51789.8A vulnerability classified as critical has been found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected is an unknown functio
CVE-2025-51735: High severity, CVSS 7.5 | Vulnix