HCL AION is susceptible to Potential Command Injection vulnerability

HCL AION  version 2 is affected by a Weak Password Policy vulnerability

HCL AION is affected by an Unrestricted File Upload vulnerability

HCL AION is affected by an Unrestricted File Upload vulnerability

A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0

HCL AION is susceptible to Missing SameSite vulnerability

HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.

HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability.

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment

HCL AION is affected by a improper handling of uploads files Size

HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource

HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability

A vulnerability  Cacheable SSL Page Found vulnerability has been identified in HCL AION.  Cached data may expose credentials, system identifiers, or internal file paths to…

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0

A Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability in HCL AION.This issue affects AION: 2.0

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION.This issue affects AION: 2.0

HCL AION is affected by an internal filesystem paths disloser vulnerability

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability

HCL AION is susceptible to Missing Content-Security-Policy

A vulnerability  Bypass of the script allowlist configuration in HCL AION.  An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute,…

Inline script execution allowed in CSP vulnerability has been identified in HCL AION v2.0

Internal Filesystem Exploration vulnerability

HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.

HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.

HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature

HCL AION is susceptible to Missing Content-Security-Policy

HCL AION version 2 is affected by a Technical Error Disclosure vulnerability

HCL AION is affected by a Missing Security Response Headers vulnerability

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability