3.7
Faible
CVE-2026-21833 HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not…
Description
HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured. CSP helps prevent attacks such as Cross-Site Scripting (XSS) by restricting the sources from which scripts, styles, and other resources can be loaded. The absence of this header may reduce the effectiveness of browser-based security controls, potentially resulting in unintended behavior or negative security impacts under certain conditions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AION | Versions non publiées |
Autres CVE de AION
Les 14 CVE de AION →
CVE-2026-35115
HCL AION is affected by multiple security vulnerabilities.
3.7
Faible
CVE-2026-21832
HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output
4.3
Moyenne
CVE-2025-62315
HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input…
3.4
Faible
CVE-2025-62318
HCL AION is affected by a vulnerability where JavaScript responses containing data could be referenced by external…
3.7
Faible