3.7
Low
CVE-2026-35109 HCL AION is affected by multiple security vulnerabilities.
Description
HCL AION is affected by a vulnerability where pages served over HTTPS could be cached by the browser or intermediate proxies. Sensitive information in cached responses may be retrieved by an unauthorized user with access to the cache, potentially resulting in unintended behavior or security impact under certain conditions.
CVSS 3.1 detail
Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NExploitable remotely over the network, without an account and without any user action; the impact on data or service is limited.
- Attack vector
- Network
- Attack complexity
- High
- Privileges required
- None
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL AION | Versions not published |
Other CVEs of HCL AION
The 21 CVEs of HCL AION →
CVE-2026-66986
HCL AION is affected by multiple security vulnerabilities.
3.3
Low
CVE-2026-66987
HCL AION is affected by multiple security vulnerabilities.
5.3
Medium
CVE-2026-66982
HCL AION is affected by multiple security vulnerabilities.
3.3
Low
CVE-2026-66984
HCL AION is affected by multiple security vulnerabilities.
3.1
Low