CVE-2021-27777

HIGH 7.5CVE-2021-27777 · Published 12/05/2022 · updated 17/06/2026

In short

CVE-2021-27777 is a HIGH (CVSS 7.5) vulnerability affecting unica (hcltech).
Chance of exploitation in the next 30 days (EPSS): 0.85%, higher than 58.0% of all vulnerabilities.
Fix: update to 12.1.1 or later.

Package	Affected versions	Patched versions
unica hcltech	`< 12.1.1`	`12.1.1`

Description

XML External Entity (XXE) injection vulnerabilities occur when poorly configured XML parsers process user supplied input without sufficient validation. Attackers can exploit this vulnerability to manipulate XML content and inject malicious external entity references.

References

support.hcltechsw.com/csm · Vendor Advisory

More vulnerabilities in unica

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free