Hcltech Aion vulnerabilities

• hcl aion Internal Filesystem Exploration vulnerability CVE-2025-52641 2.9 LowApril 15, 2026
• hcl aion HCL AION is affected by an internal filesystem paths disloser vulnerability CVE-2025-52642 3.3 LowMarch 16, 2026
• hcl aion HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. CVE-2025-52646 2.2 LowMarch 16, 2026
• hcl aion HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. CVE-2025-52645 1.9 LowMarch 16, 2026
• hcl aion HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature CVE-2025-52649 1.8 LowMarch 16, 2026
• hcl aion HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. CVE-2025-52644 5.8 MediumMarch 16, 2026
• hcl aion HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment CVE-2025-52643 4.7 MediumMarch 16, 2026
• hcl aion HCL AION is affected by a improper handling of uploads files Size CVE-2025-52636 1.8 LowMarch 16, 2026
• hcl aion HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. CVE-2025-52631 3.7 LowFebruary 3, 2026
• hcl aion HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability CVE-2025-52623 3.7 LowFebruary 3, 2026
• hcl aion HCL AION is susceptible to Missing SameSite vulnerability CVE-2025-52628 4.6 MediumFebruary 3, 2026
• hcl aion HCL AION is susceptible to Missing Content-Security-Policy CVE-2025-52633 3.1 LowFebruary 3, 2026
• hcl aion HCL AION is susceptible to Missing Content-Security-Policy CVE-2025-52629 3.7 LowFebruary 3, 2026
• hcl aion HCL AION is susceptible to Potential Command Injection vulnerability CVE-2025-52626 4.5 MediumFebruary 3, 2026
• hcl aion HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource CVE-2025-52627 5.5 MediumFebruary 3, 2026
• hcl aion HCL AION is affected by a Weak Password Policy vulnerability CVE-2025-55252 3.1 LowJanuary 19, 2026
• hcl aion HCL AION is affected by a Technical Error Disclosure vulnerability CVE-2025-55250 1.8 LowJanuary 19, 2026
• hcl aion HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase... CVE-2025-52661 2.4 LowJanuary 19, 2026
• hcl aion HCL AION is affected by a Missing Security Response Headers vulnerability. CVE-2025-55249 3.5 LowJanuary 19, 2026
• hcl aion HCL AION is affected by a Cacheable HTTP Response vulnerability CVE-2025-52659 2.8 LowJanuary 19, 2026
• hcl aion HCL AION is affected by an Host Header Injection vulnerability CVE-2025-52660 2.7 LowJanuary 19, 2026
• hcl aion HCL AION is affected by an Unrestricted File Upload vulnerability CVE-2025-55251 3.1 LowJanuary 19, 2026
• hcl aion HCL AION is susceptible to Cacheable SSL Page Found vulnerability CVE-2025-52625 3.7 LowOctober 10, 2025
• hcl aion HCL AION is susceptible to Bypass of the script allow list configuration vulnerability CVE-2025-52624 5.4 MediumOctober 10, 2025
• hcl aion HCL AION is susceptible to Trusted types in scripts not enforced in CSP CVE-2025-52635 3.7 LowOctober 10, 2025
• hcl aion HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability CVE-2025-52632 6.5 MediumOctober 10, 2025
• hcl aion HCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerability CVE-2025-52630 3.7 LowOctober 10, 2025
• hcl aion HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed CVE-2025-52634 3.7 LowOctober 10, 2025
• hcl aion HCL AION is susceptible to Inline script execution allowed in CSP vulnerability CVE-2025-52650 8.2 HighOctober 10, 2025