AI
Product
Aion
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 11Medium 13Low 0
Watch
Add Aion to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-52628 | 8.8 | Feb 3 | HCL AION is susceptible to Missing SameSite vulnerability Affected: 2.0.0 |
| CVE-2025-52644 | 8.2 | Mar 16 | HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. Affected: 2.0.0 before 2.1.2 |
| CVE-2025-52631 | 8.1 | Feb 3 | HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. Affected: 2.0.0 |
| CVE-2025-52643 | 7.8 | Mar 16 | HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment Affected: 2.0.0 before 2.1.2 |
| CVE-2025-52636 | 7.5 | Mar 16 | HCL AION is affected by a improper handling of uploads files Size Affected: 2.0.0 before 2.1.2 |
| CVE-2025-52627 | 7.5 | Feb 3 | HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource Affected: 2.0.0 |
| CVE-2025-52659 | 7.5 | Jan 19 | HCL AION is affected by a Cacheable HTTP Response vulnerability Affected: 2.0.0 |
| CVE-2025-52625 | 7.5 | Oct 10 | A vulnerability Cacheable SSL Page Found vulnerability has been identified in HCL AION. Cached data may expose credentials, system identifiers, or internal file paths to… Affected: 2.0.0 |
| CVE-2025-52634 | 7.5 | Oct 10 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0 Affected: 2.0.0 |
| CVE-2025-52632 | 7.5 | Oct 10 | A Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability in HCL AION.This issue affects AION: 2.0 Affected: 2.0.0 |
| CVE-2025-52630 | 7.5 | Oct 10 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION.This issue affects AION: 2.0 Affected: 2.0.0 |
Showing 11