Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: HCL Component: Aion Clear all filters
TI-2025-32727 CVE-2025-52648 · GHSA-8vv4-6v2f-6rcq

Improper signature verification in HCL AION

Priority MEDIUM 41

HCL AION is affected by a vulnerability where offering images are not digitally signed.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00124 Published 2026-03-16 No fix listed CWE-347
TI-2025-32717 CVE-2025-52638 · GHSA-3m9h-mw45-63hc

Multiple security vulnerabilities affect HCL AION

Priority LOW 33

HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00135 Published 2026-03-16 No fix listed CWE-345
TI-2025-32716 CVE-2025-52637 · GHSA-6v6x-crvp-9rjr

Multiple security vulnerabilities affect HCL AION

Priority LOW 32

HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00239 Published 2026-03-16 No fix listed CWE-89