What’s Vulnerable › Vulnerabilities

CVE-2025-62312: HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication

• Severity: low (CVSS 3.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-14 · updated 2026-10-07
• Weakness: CWE-522

Description

HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse, especially if not combined with secure transmission practices.

Affected products

• HCL AION: 2.1.0

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636

Get alerted when CVE-2025-62312 or the next vulnerability affects your stack