What’s Vulnerable › Products

HCL AION vulnerabilities

44 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 44 published in the last 12 months.

Check whether your HCL AION version is affected

Latest HCL AION vulnerabilities

• CVE-2026-21833 — HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833) (CVSS 3.7)
• CVE-2026-21832 — HCL AION is affected by multiple security vulnerabilities. (CVSS 4.3)
• CVE-2025-62318 — HCL AION is affected by multiple security vulnerabilities. (CVSS 3.7)
• CVE-2025-62315 — HCL AION is affected by multiple security vulnerabilities. (CVSS 3.4)
• CVE-2025-62314 — HCL AION is affected by multiple security vulnerabilities. (CVSS 5.6)
• CVE-2025-52640 — HCL AION is affected by multiple security vulnerabilities. (CVSS 4.7)
• CVE-2025-62317 — HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. (CVSS 2.6)
• CVE-2025-62316 — HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured (CVSS 2.3)
• CVE-2025-62313 — HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. (CVSS 5.4)
• CVE-2025-62312 — HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication (CVSS 3.0)
• CVE-2025-62311 — HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. (CVSS 4.3)
• CVE-2025-62310 — HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations (CVSS 5.4)
• CVE-2025-62309 — HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. (CVSS 2.6)
• CVE-2025-62308 — HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed (CVSS 5.1)
• CVE-2025-62305 — HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions (CVSS 5.1)
• CVE-2025-52641 — Internal Filesystem Exploration vulnerability (CVSS 5.3)
• CVE-2025-52649 — HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature (CVSS 5.3)
• CVE-2025-52646 — HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. (CVSS 5.3)
• CVE-2025-52645 — HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. (CVSS 5.3)
• CVE-2025-52644 — HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. (CVSS 8.2)
• CVE-2025-52643 — HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment (CVSS 7.8)
• CVE-2025-52642 — HCL AION is affected by an internal filesystem paths disloser vulnerability (CVSS 6.5)
• CVE-2025-52636 — HCL AION is affected by a improper handling of uploads files Size (CVSS 7.5)
• CVE-2025-52633 — HCL AION is susceptible to Missing Content-Security-Policy (CVSS 5.3)
• CVE-2025-52631 — HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. (CVSS 8.1)