AI
Product
AION
by HCL · last CVE May 14, 2026
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 13Low 4
Watch

Add AION to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-52648
9.8
0%
Mar 16
HCL AION is affected by a vulnerability where offering images are not digitally signed
Affected: 2.0
CVE-2025-52626
9.8
1%
Feb 3
HCL AION is susceptible to Potential Command Injection vulnerability
Affected: 2.0
CVE-2025-52628
8.8
0%
Feb 3
HCL AION is susceptible to Missing SameSite vulnerability
Affected: 2.0
CVE-2025-52644
8.2
0%
Mar 16
HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.
Affected: 2.0
CVE-2025-52631
8.1
0%
Feb 3
HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability.
Affected: 2.0
CVE-2025-52643
7.8
0%
Mar 16
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment
Affected: 2.0
CVE-2025-52636
7.5
0%
Mar 16
HCL AION is affected by a improper handling of uploads files Size
Affected: 2.0
CVE-2025-52627
7.5
0%
Feb 3
HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource
Affected: 2.0
CVE-2025-52637
7.3
0%
Mar 16
Multiple security vulnerabilities affect HCL AION
Affected: 2.0
CVE-2025-52638
7.2
0%
Mar 16
Multiple security vulnerabilities affect HCL AION
Affected: 2.0
CVE-2025-52642
6.5
0%
Mar 16
HCL AION is affected by an internal filesystem paths disloser vulnerability
Affected: 2.0
CVE-2025-52623
6.5
0%
Feb 3
HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability
Affected: 2.0
CVE-2025-52629
6.1
0%
Feb 3
HCL AION is susceptible to Missing Content-Security-Policy
Affected: 2.0
CVE-2025-62313
5.4
0%
May 14
HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced.
Affected: 2.1.0
CVE-2025-62310
5.4
0%
May 14
HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations
Affected: 2.1.0
CVE-2025-52641
5.3
0%
Apr 15
Internal Filesystem Exploration vulnerability
Affected: 2.0
CVE-2025-52646
5.3
0%
Mar 16
HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.
Affected: 2.0
CVE-2025-52645
5.3
0%
Mar 16
HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.
Affected: 2.0
CVE-2025-52649
5.3
0%
Mar 16
HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature
Affected: 2.0
CVE-2025-52633
5.3
0%
Feb 3
HCL AION is susceptible to Missing Content-Security-Policy
Affected: 2.0
CVE-2025-62305
5.1
0%
May 14
HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions
Affected: 2.1.0
CVE-2025-62308
5.1
0%
May 14
HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed
Affected: 2.1.0
CVE-2025-62311
4.3
0%
May 14
HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.
Affected: 2.1.0
CVE-2025-62312
3.0
0%
May 14
HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication
Affected: 2.1.0
CVE-2025-62317
2.6
0%
May 14
HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.
Affected: 2.1.0
CVE-2025-62309
2.6
0%
May 14
HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.
Affected: 2.1.0
CVE-2025-62316
2.3
0%
May 14
HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured
Affected: 2.1.0
Showing 27