What’s Vulnerable › Vulnerabilities
CVE-2025-52646: HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-03-16 · updated 2026-06-17
- Weakness: CWE-89
Description
HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. Improper validation or restrictions on query execution could expose the system to unintended database interactions or limited information exposure under specific conditions.
Affected products
- HCL AION: from 2.0.0 before 2.1.2 — fixed in 2.1.2
How to fix
Upgrade to a fixed version: HCL AION 2.1.2. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-52646 or the next vulnerability affects your stack