3.5
Low
CVE-2025-55249 HCL AION is affected by a Missing Security Response Headers vulnerability
Description
HCL AION is affected by a Missing Security Response Headers vulnerability. The absence of standard security headers may weaken the application’s overall security posture and increase its susceptibility to common web-based attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AION | 2 | No fix stated |
Other CVEs of AION
The 14 CVEs of AION →
CVE-2026-35115
HCL AION is affected by multiple security vulnerabilities.
3.7
Low
CVE-2026-21833
HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not…
3.7
Low
CVE-2026-21832
HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output
4.3
Medium
CVE-2025-62315
HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input…
3.4
Low