AI
Product
AION
32
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 11Medium 14Low 4
Watch
Add AION to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-52628 | 8.8 | Feb 3 | HCL AION is susceptible to Missing SameSite vulnerability Affected: 2.0 |
| CVE-2025-52644 | 8.2 | Mar 16 | HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. Affected: 2.0 |
| CVE-2025-52631 | 8.1 | Feb 3 | HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. Affected: 2.0 |
| CVE-2025-52643 | 7.8 | Mar 16 | HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment Affected: 2.0 |
| CVE-2025-52636 | 7.5 | Mar 16 | HCL AION is affected by a improper handling of uploads files Size Affected: 2.0 |
| CVE-2025-52627 | 7.5 | Feb 3 | HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource Affected: 2.0 |
| CVE-2025-52625 | 7.5 | Oct 10 | HCL AION is susceptible to Cacheable SSL Page Found vulnerability Affected: 2.0 |
| CVE-2025-52632 | 7.5 | Oct 10 | HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability Affected: 2.0 |
| CVE-2025-52630 | 7.5 | Oct 10 | HCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerability Affected: 2.0 |
| CVE-2025-52637 | 7.3 | Mar 16 | Multiple security vulnerabilities affect HCL AION Affected: 2.0 |
| CVE-2025-52638 | 7.2 | Mar 16 | Multiple security vulnerabilities affect HCL AION Affected: 2.0 |
Showing 11