TI-2025-32705 CVE-2025-52626 · GHSA-8jr7-qfgf-2wrq
HCL AION is susceptible to Potential Command Injection vulnerability
Priority MEDIUM 43
A Potential Command Injection vulnerability in HCL AION.
HCL Software
Records662All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical66CVSS 9.0–10.0
CVSS high157CVSS 7.0–8.9
Exploited now
HCL Software records in CISA KEVNo HCL Software vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
29 records in Aion · all components
TI-2025-32739 CVE-2025-52660 · GHSA-3h56-c742-73f2
HCL AION is affected by an Host Header Injection vulnerability
Priority MEDIUM 42
HCL AION is affected by an Unrestricted File Upload vulnerability.
TI-2025-32714 CVE-2025-52635 · GHSA-vvq5-8hxj-499m
HCL AION is susceptible to Trusted types in scripts not enforced in CSP
Priority MEDIUM 42
A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0.
TI-2025-34917 CVE-2025-55252 · GHSA-cfwp-mmqm-9vrh
HCL AION is affected by a Weak Password Policy vulnerability
Priority MEDIUM 41
HCL AION version 2 is affected by a Weak Password Policy vulnerability.
TI-2025-34916 CVE-2025-55251 · GHSA-7g5p-hwp2-2wpx
Unrestricted file upload in HCL Software AION
Priority MEDIUM 41
HCL AION is affected by an Unrestricted File Upload vulnerability.
TI-2025-32707 CVE-2025-52628 · GHSA-fv45-rwvx-gxxg
HCL AION is susceptible to Missing SameSite vulnerability
Priority LOW 38
HCL AION is affected by a Cookie with Insecure, Improper, or Missing SameSite vulnerability.
TI-2025-32729 CVE-2025-52650 · GHSA-wj34-pw4p-f59j
HCL AION is susceptible to Inline script execution allowed in CSP vulnerability
Priority LOW 35
Inline script execution allowed in CSP vulnerability has been identified in HCL AION v2.0
TI-2025-32723 CVE-2025-52644 · GHSA-9qgv-q4c6-mp34
HCL AION is affected by a vulnerability where certain user actions are not adequately…
Priority LOW 35
HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.
TI-2025-32710 CVE-2025-52631 · GHSA-8fg9-7c2p-vjvf
Information disclosure in HCL AION
Priority LOW 35
HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability.
TI-2025-32722 CVE-2025-52643 · GHSA-5vm9-9xjm-4755
Protection mechanism failure in HCL AION
Priority LOW 33
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment.
TI-2025-32738 CVE-2025-52659 · GHSA-7rfj-fx9j-89g3
HCL AION is affected by a Cacheable HTTP Response vulnerability
Priority LOW 32
HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability.
TI-2025-32715 CVE-2025-52636 · GHSA-6r37-9q52-pqr5
HCL AION is affected by a improper handling of uploads files Size
Priority LOW 32
HCL AION is affected by a vulnerability related to the handling of upload size limits.
TI-2025-32713 CVE-2025-52634 · GHSA-rmjh-gfqm-35mv
HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed
Priority LOW 32
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0.
TI-2025-32711 CVE-2025-52632 · GHSA-m825-v286-93rf
HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability
Priority LOW 32
A Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability in HCL AION.This issue affects AION: 2.0.
TI-2025-32709 CVE-2025-52630 · GHSA-c99j-j5wh-jmx9
HCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerability
Priority LOW 32
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION.This issue affects AION: 2.0.
TI-2025-32706 CVE-2025-52627 · GHSA-7rm5-wh6c-xjgf
HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource
Priority LOW 32
Root File System Not Mounted as Read-Only configuration vulnerability.
TI-2025-32704 CVE-2025-52625 · GHSA-pw85-34wf-p82j
HCL AION is susceptible to Cacheable SSL Page Found vulnerability
Priority LOW 32
A vulnerability Cacheable SSL Page Found vulnerability has been identified in HCL AION.
TI-2025-32721 CVE-2025-52642 · GHSA-2mvv-v998-h3gj
HCL AION is affected by an internal filesystem paths disloser vulnerability
Priority LOW 28
HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour.
TI-2025-32702 CVE-2025-52623 · GHSA-xrmq-qg76-wcr7
Insufficiently protected credentials in HCL AION
Priority LOW 28
HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability.
TI-2025-32703 CVE-2025-52624 · GHSA-9qg7-6j9m-fqcj
HCL AION is susceptible to Bypass of the script allow list configuration vulnerability
Priority LOW 27
A vulnerability Bypass of the script allowlist configuration in HCL AION.
TI-2025-32708 CVE-2025-52629 · GHSA-6wh6-gf6j-j45q
HCL AION is susceptible to Missing Content-Security-Policy
Priority LOW 26
HCL AION is susceptible to Missing Content-Security-Policy.
TI-2025-34915 CVE-2025-55250 · GHSA-wx82-m2gx-4cgr
HCL AION is affected by a Technical Error Disclosure vulnerability
Priority LOW 23
HCL AION version 2 is affected by a Technical Error Disclosure vulnerability.
TI-2025-34914 CVE-2025-55249 · GHSA-h2w2-28mj-m289
Protection mechanism failure in HCL Software AION
Priority LOW 23
HCL AION is affected by a Missing Security Response Headers vulnerability.
TI-2025-32740 CVE-2025-52661 · GHSA-j675-f749-gw7q
Insufficient session expiration in HCL Software AION
Priority LOW 23
HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability.
TI-2025-32728 CVE-2025-52649 · GHSA-w3f6-m562-2q63
Information disclosure in HCL AION
Priority LOW 23
HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature.