Search Results (28 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-55252 1 Hcltech 1 Aion 2026-01-30 3.1 Low
HCL AION  version 2 is affected by a Weak Password Policy vulnerability. This can  allow the use of easily guessable passwords, potentially resulting in unauthorized access
CVE-2025-55250 1 Hcltech 1 Aion 2026-01-30 1.8 Low
HCL AION version 2 is affected by a Technical Error Disclosure vulnerability. This can expose sensitive technical details, potentially resulting in information disclosure or aiding further attacks.
CVE-2025-52630 1 Hcltech 1 Aion 2025-10-24 3.7 Low
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION.This issue affects AION: 2.0.
CVE-2025-52632 1 Hcltech 1 Aion 2025-10-24 6.5 Medium
A Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability in HCL AION.This issue affects AION: 2.0.
CVE-2025-52634 1 Hcltech 1 Aion 2025-10-24 3.7 Low
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0.
CVE-2025-52650 1 Hcltech 1 Aion 2025-10-24 8.2 High
Inline script execution allowed in CSP vulnerability has been identified in HCL AION v2.0
CVE-2025-52625 1 Hcltech 1 Aion 2025-10-24 3.7 Low
A vulnerability  Cacheable SSL Page Found vulnerability has been identified in HCL AION.  Cached data may expose credentials, system identifiers, or internal file paths to attackers with access to the device or browser This issue affects AION: 2.0.
CVE-2025-52635 1 Hcltech 1 Aion 2025-10-24 3.7 Low
A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0.