| CVE-2026-35115 |
HCL AION is affected by multiple security vulnerabilities.
|
3.7
Low
|
Nov 6, 2026 |
| CVE-2026-21833 |
HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not…
|
3.7
Low
|
Oct 1, 2026 |
| CVE-2026-21832 |
HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output
|
4.3
Medium
|
Aug 13, 2026 |
| CVE-2025-62315 |
HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input…
|
3.4
Low
|
Aug 13, 2026 |
| CVE-2025-62318 |
HCL AION is affected by a vulnerability where JavaScript responses containing data could be referenced by external…
|
3.7
Low
|
Aug 13, 2026 |
| CVE-2025-62314 |
HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls
|
5.6
Medium
|
Aug 13, 2026 |
| CVE-2025-52640 |
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without…
|
4.7
Medium
|
Aug 13, 2026 |
| CVE-2025-55252 |
HCL AION version 2 is affected by a Weak Password Policy vulnerability
|
3.1
Low
|
Jan 19, 2026 |
| CVE-2025-55250 |
HCL AION version 2 is affected by a Technical Error Disclosure vulnerability
|
1.8
Low
|
Jan 19, 2026 |
| CVE-2025-52661 |
HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability
|
2.4
Low
|
Jan 19, 2026 |
| CVE-2025-55249 |
HCL AION is affected by a Missing Security Response Headers vulnerability
|
3.5
Low
|
Jan 19, 2026 |
| CVE-2025-52659 |
HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability
|
2.8
Low
|
Jan 19, 2026 |
| CVE-2025-52660 |
HCL AION is affected by an Unrestricted File Upload vulnerability
|
2.7
Low
|
Jan 19, 2026 |
| CVE-2025-55251 |
HCL AION is affected by an Unrestricted File Upload vulnerability
|
3.1
Low
|
Jan 19, 2026 |