AI
Product
AION
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 13Low 4
Watch
Add AION to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-52648 | 9.8 | Mar 16 | HCL AION is affected by a vulnerability where offering images are not digitally signed Affected: 2.0 |
| CVE-2025-52626 | 9.8 | Feb 3 | HCL AION is susceptible to Potential Command Injection vulnerability Affected: 2.0 |
| CVE-2025-52628 | 8.8 | Feb 3 | HCL AION is susceptible to Missing SameSite vulnerability Affected: 2.0 |
| CVE-2025-52644 | 8.2 | Mar 16 | HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. Affected: 2.0 |
| CVE-2025-52631 | 8.1 | Feb 3 | HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. Affected: 2.0 |
| CVE-2025-52643 | 7.8 | Mar 16 | HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment Affected: 2.0 |
| CVE-2025-52636 | 7.5 | Mar 16 | HCL AION is affected by a improper handling of uploads files Size Affected: 2.0 |
| CVE-2025-52627 | 7.5 | Feb 3 | HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource Affected: 2.0 |
| CVE-2025-52637 | 7.3 | Mar 16 | Multiple security vulnerabilities affect HCL AION Affected: 2.0 |
| CVE-2025-52638 | 7.2 | Mar 16 | Multiple security vulnerabilities affect HCL AION Affected: 2.0 |
| CVE-2025-52642 | 6.5 | Mar 16 | HCL AION is affected by an internal filesystem paths disloser vulnerability Affected: 2.0 |
| CVE-2025-52623 | 6.5 | Feb 3 | HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability Affected: 2.0 |
| CVE-2025-52629 | 6.1 | Feb 3 | HCL AION is susceptible to Missing Content-Security-Policy Affected: 2.0 |
| CVE-2025-62313 | 5.4 | May 14 | HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. Affected: 2.1.0 |
| CVE-2025-62310 | 5.4 | May 14 | HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations Affected: 2.1.0 |
| CVE-2025-52641 | 5.3 | Apr 15 | Internal Filesystem Exploration vulnerability Affected: 2.0 |
| CVE-2025-52646 | 5.3 | Mar 16 | HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. Affected: 2.0 |
| CVE-2025-52645 | 5.3 | Mar 16 | HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. Affected: 2.0 |
| CVE-2025-52649 | 5.3 | Mar 16 | HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature Affected: 2.0 |
| CVE-2025-52633 | 5.3 | Feb 3 | HCL AION is susceptible to Missing Content-Security-Policy Affected: 2.0 |
| CVE-2025-62305 | 5.1 | May 14 | HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions Affected: 2.1.0 |
| CVE-2025-62308 | 5.1 | May 14 | HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed Affected: 2.1.0 |
| CVE-2025-62311 | 4.3 | May 14 | HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. Affected: 2.1.0 |
| CVE-2025-62312 | 3.0 | May 14 | HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication Affected: 2.1.0 |
| CVE-2025-62317 | 2.6 | May 14 | HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Affected: 2.1.0 |
| CVE-2025-62309 | 2.6 | May 14 | HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. Affected: 2.1.0 |
| CVE-2025-62316 | 2.3 | May 14 | HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured Affected: 2.1.0 |
Showing 27
