Vulnerabilities

HCL AION is affected by a vulnerability where certain system behaviours may allow exploration of internal filesystem structures.

HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour.

HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.

HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.

HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature.

HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment.

HCL AION is affected by a vulnerability related to the handling of upload size limits.

HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability.

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability.

HCL AION is affected by a Cookie with Insecure, Improper, or Missing SameSite vulnerability.

HCL AION is affected by a Permanent Cookie Containing Sensitive Session Information vulnerability.

HCL AION is susceptible to Missing Content-Security-Policy.

A Potential Command Injection vulnerability in HCL AION.

Root File System Not Mounted as Read-Only configuration vulnerability.

HCL AION version 2 is affected by a Weak Password Policy vulnerability.

HCL AION version 2 is affected by a Technical Error Disclosure vulnerability.

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability.

HCL AION is affected by a Missing Security Response Headers vulnerability.

HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability.

HCL AION is affected by an Unrestricted File Upload vulnerability.

HCL AION is affected by an Unrestricted File Upload vulnerability.

A vulnerability Cacheable SSL Page Found vulnerability has been identified in HCL AION.

A vulnerability Bypass of the script allowlist configuration in HCL AION.

A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0.