| CVE-2026-35115 |
HCL AION is affected by multiple security vulnerabilities.
|
3.7
Faible
|
6 nov. 2026 |
| CVE-2026-21833 |
HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not…
|
3.7
Faible
|
1 oct. 2026 |
| CVE-2026-21832 |
HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output
|
4.3
Moyenne
|
13 août 2026 |
| CVE-2025-62315 |
HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input…
|
3.4
Faible
|
13 août 2026 |
| CVE-2025-62318 |
HCL AION is affected by a vulnerability where JavaScript responses containing data could be referenced by external…
|
3.7
Faible
|
13 août 2026 |
| CVE-2025-62314 |
HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls
|
5.6
Moyenne
|
13 août 2026 |
| CVE-2025-52640 |
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without…
|
4.7
Moyenne
|
13 août 2026 |
| CVE-2025-55252 |
HCL AION version 2 is affected by a Weak Password Policy vulnerability
|
3.1
Faible
|
19 janv. 2026 |
| CVE-2025-55250 |
HCL AION version 2 is affected by a Technical Error Disclosure vulnerability
|
1.8
Faible
|
19 janv. 2026 |
| CVE-2025-52661 |
HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability
|
2.4
Faible
|
19 janv. 2026 |
| CVE-2025-55249 |
HCL AION is affected by a Missing Security Response Headers vulnerability
|
3.5
Faible
|
19 janv. 2026 |
| CVE-2025-52659 |
HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability
|
2.8
Faible
|
19 janv. 2026 |
| CVE-2025-52660 |
HCL AION is affected by an Unrestricted File Upload vulnerability
|
2.7
Faible
|
19 janv. 2026 |
| CVE-2025-55251 |
HCL AION is affected by an Unrestricted File Upload vulnerability
|
3.1
Faible
|
19 janv. 2026 |