AI
Product
AION
13
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 3High 1Medium 6Low 3
Watch
Add AION to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-55252 | 9.8 | Jan 19 | HCL AION is affected by a Weak Password Policy vulnerability Affected: 2 |
| CVE-2025-52660 | 9.8 | Jan 19 | HCL AION is affected by an Host Header Injection vulnerability Affected: 2 |
| CVE-2025-55251 | 9.8 | Jan 19 | HCL AION is affected by an Unrestricted File Upload vulnerability Affected: 2 |
| CVE-2025-52659 | 7.5 | Jan 19 | HCL AION is affected by a Cacheable HTTP Response vulnerability Affected: 2 |
| CVE-2025-62314 | 5.6 | Aug 13 | HCL AION is affected by multiple security vulnerabilities. Affected: v2.1.0 |
| CVE-2025-55250 | 5.3 | Jan 19 | HCL AION is affected by a Technical Error Disclosure vulnerability Affected: 2 |
| CVE-2025-52661 | 5.3 | Jan 19 | HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability Affected: 2 |
| CVE-2025-55249 | 5.3 | Jan 19 | HCL AION is affected by a Missing Security Response Headers vulnerability. Affected: 2 |
| CVE-2025-52640 | 4.7 | Aug 13 | HCL AION is affected by multiple security vulnerabilities. Affected: v2.0 |
| CVE-2026-21832 | 4.3 | Aug 13 | HCL AION is affected by multiple security vulnerabilities. Affected: v2.5.0 |
| CVE-2026-21833 | 3.7 | Oct 1 | HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833) Affected: Version 2.5.0 |
| CVE-2025-62318 | 3.7 | Aug 13 | HCL AION is affected by multiple security vulnerabilities. Affected: v2.1.0 |
| CVE-2025-62315 | 3.4 | Aug 13 | HCL AION is affected by multiple security vulnerabilities. Affected: v2.1.0 |
Showing 13