HCL AION

• CVE-2025-62305 Medium 5.1 HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions 0.1%
• CVE-2025-62317 Low 2.6 HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. 0.1%
• CVE-2025-62308 Medium 5.1 HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed 0.1%
• CVE-2025-62309 Low 2.6 HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. 0.1%
• CVE-2025-62312 Low 3.0 HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication 0.1%
• CVE-2025-62316 Low 2.3 HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured 0.1%
• CVE-2025-62313 Medium 5.4 HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. 0.2%
• CVE-2025-62311 Medium 4.3 HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. <0.1%
• CVE-2025-62310 Medium 5.4 HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations <0.1%
• CVE-2025-52641 Low 2.9 Internal Filesystem Exploration vulnerability 0.1%
• CVE-2025-52642 Low 3.3 HCL AION is affected by an internal filesystem paths disloser vulnerability 0.1%
• CVE-2025-52646 Low 2.2 HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. 0.2%
• CVE-2025-52645 Low 1.9 HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. <0.1%
• CVE-2025-52649 Low 1.8 HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature 0.1%
• CVE-2025-52644 Medium 5.8 HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. 0.1%
• CVE-2025-52643 Medium 4.7 HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment <0.1%
• CVE-2025-52636 Low 1.8 HCL AION is affected by a improper handling of uploads files Size 0.1%
• CVE-2025-52648 Medium 4.8 HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks 0.1%
• CVE-2025-52638 Medium 5.6 Multiple security vulnerabilities affect HCL AION 0.1%
• CVE-2025-52637 Medium 4.5 Multiple security vulnerabilities affect HCL AION 0.2%
• CVE-2025-52631 Low 3.7 HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. 0.2%
• CVE-2025-52623 Low 3.7 HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability 0.2%
• CVE-2025-52628 Medium 4.6 HCL AION is susceptible to Missing SameSite vulnerability 0.2%
• CVE-2025-52633 Low 3.1 HCL AION is susceptible to Missing Content-Security-Policy 0.2%
• CVE-2025-52629 Low 3.7 HCL AION is susceptible to Missing Content-Security-Policy 0.1%
• CVE-2025-52626 Medium 4.5 HCL AION is susceptible to Potential Command Injection vulnerability 0.7%
• CVE-2025-52627 Medium 5.5 HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource 0.2%
• CVE-2025-52625 Low 3.7 HCL AION is susceptible to Cacheable SSL Page Found vulnerability 0.2%
• CVE-2025-52624 Medium 5.4 HCL AION is susceptible to Bypass of the script allow list configuration vulnerability 0.2%
• CVE-2025-52635 Low 3.7 HCL AION is susceptible to Trusted types in scripts not enforced in CSP 0.3%
• CVE-2025-52632 Medium 6.5 HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability 0.1%
• CVE-2025-52630 Low 3.7 HCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerability 0.2%