# HCL AION. Every CVE that names HCL AION among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions](https://agentprime.io/advisories/CVE-2025-62305.md) `CVE-2025-62305` · CVE record: HCL AION · CVSS 5.1 Medium · Not analysed yet · Published 14 May 2026 · Tags: Information disclosure - [HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.](https://agentprime.io/advisories/CVE-2025-62317.md) `CVE-2025-62317` · CVE record: HCL AION · CVSS 2.6 Low · Not analysed yet · Published 14 May 2026 · Tags: CWE-598 - [HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed](https://agentprime.io/advisories/CVE-2025-62308.md) `CVE-2025-62308` · CVE record: HCL AION · CVSS 5.1 Medium · Not analysed yet · Published 14 May 2026 · Tags: Information disclosure - [HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.](https://agentprime.io/advisories/CVE-2025-62309.md) `CVE-2025-62309` · CVE record: HCL AION · CVSS 2.6 Low · Not analysed yet · Published 14 May 2026 · Tags: Information disclosure - [HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication](https://agentprime.io/advisories/CVE-2025-62312.md) `CVE-2025-62312` · CVE record: HCL AION · CVSS 3.0 Low · Not analysed yet · Published 14 May 2026 · Tags: Hard-coded credentials - [HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured](https://agentprime.io/advisories/CVE-2025-62316.md) `CVE-2025-62316` · CVE record: HCL AION · CVSS 2.3 Low · Not analysed yet · Published 14 May 2026 · Tags: CWE-1021 - [HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced.](https://agentprime.io/advisories/CVE-2025-62313.md) `CVE-2025-62313` · CVE record: HCL AION · CVSS 5.4 Medium · Not analysed yet · Published 14 May 2026 · Tags: Authentication bypass - [HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.](https://agentprime.io/advisories/CVE-2025-62311.md) `CVE-2025-62311` · CVE record: HCL AION · CVSS 4.3 Medium · Not analysed yet · Published 14 May 2026 · Tags: Weak cryptography or TLS - [HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations](https://agentprime.io/advisories/CVE-2025-62310.md) `CVE-2025-62310` · CVE record: HCL AION · CVSS 5.4 Medium · Not analysed yet · Published 14 May 2026 · Tags: Weak cryptography or TLS - [Internal Filesystem Exploration vulnerability](https://agentprime.io/advisories/CVE-2025-52641.md) `CVE-2025-52641` · CVE record: HCL AION · CVSS 2.9 Low · Not analysed yet · Published 15 Apr 2026 · Tags: Information disclosure - [HCL AION is affected by an internal filesystem paths disloser vulnerability](https://agentprime.io/advisories/CVE-2025-52642.md) `CVE-2025-52642` · CVE record: HCL AION · CVSS 3.3 Low · Not analysed yet · Published 16 Mar 2026 · Tags: Information disclosure - [HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.](https://agentprime.io/advisories/CVE-2025-52646.md) `CVE-2025-52646` · CVE record: HCL AION · CVSS 2.2 Low · Not analysed yet · Published 16 Mar 2026 · Tags: SQL injection - [HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.](https://agentprime.io/advisories/CVE-2025-52645.md) `CVE-2025-52645` · CVE record: HCL AION · CVSS 1.9 Low · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-345 - [HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature](https://agentprime.io/advisories/CVE-2025-52649.md) `CVE-2025-52649` · CVE record: HCL AION · CVSS 1.8 Low · Not analysed yet · Published 16 Mar 2026 · Tags: Information disclosure - [HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.](https://agentprime.io/advisories/CVE-2025-52644.md) `CVE-2025-52644` · CVE record: HCL AION · CVSS 5.8 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-778 - [HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment](https://agentprime.io/advisories/CVE-2025-52643.md) `CVE-2025-52643` · CVE record: HCL AION · CVSS 4.7 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-693 - [HCL AION is affected by a improper handling of uploads files Size](https://agentprime.io/advisories/CVE-2025-52636.md) `CVE-2025-52636` · CVE record: HCL AION · CVSS 1.8 Low · Not analysed yet · Published 16 Mar 2026 · Tags: Denial of service - [Improper signature verification in HCL AION](https://agentprime.io/advisories/CVE-2025-52648.md) `CVE-2025-52648` · CVE record: HCL AION · CVSS 4.8 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: Weak cryptography or TLS - [Multiple security vulnerabilities affect HCL AION](https://agentprime.io/advisories/CVE-2025-52638.md) `CVE-2025-52638` · CVE record: HCL AION · CVSS 5.6 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-345 - [Multiple security vulnerabilities affect HCL AION](https://agentprime.io/advisories/CVE-2025-52637.md) `CVE-2025-52637` · CVE record: HCL AION · CVSS 4.5 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: SQL injection - [HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability.](https://agentprime.io/advisories/CVE-2025-52631.md) `CVE-2025-52631` · CVE record: HCL AION · CVSS 3.7 Low · Not analysed yet · Published 3 Feb 2026 · Tags: Information disclosure - [HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability](https://agentprime.io/advisories/CVE-2025-52623.md) `CVE-2025-52623` · CVE record: HCL AION · CVSS 3.7 Low · Not analysed yet · Published 3 Feb 2026 · Tags: Hard-coded credentials - [HCL AION is susceptible to Missing SameSite vulnerability](https://agentprime.io/advisories/CVE-2025-52628.md) `CVE-2025-52628` · CVE record: HCL AION · CVSS 4.6 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-1275 - [HCL AION is susceptible to Missing Content-Security-Policy](https://agentprime.io/advisories/CVE-2025-52633.md) `CVE-2025-52633` · CVE record: HCL AION · CVSS 3.1 Low · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-539 - [HCL AION is susceptible to Missing Content-Security-Policy](https://agentprime.io/advisories/CVE-2025-52629.md) `CVE-2025-52629` · CVE record: HCL AION · CVSS 3.7 Low · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-1032 - [HCL AION is susceptible to Potential Command Injection vulnerability](https://agentprime.io/advisories/CVE-2025-52626.md) `CVE-2025-52626` · CVE record: HCL AION · CVSS 4.5 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Command injection - [HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource](https://agentprime.io/advisories/CVE-2025-52627.md) `CVE-2025-52627` · CVE record: HCL AION · CVSS 5.5 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Broken access control - [HCL AION is susceptible to Cacheable SSL Page Found vulnerability](https://agentprime.io/advisories/CVE-2025-52625.md) `CVE-2025-52625` · CVE record: HCL AION · CVSS 3.7 Low · Not analysed yet · Published 10 Oct 2025 · Tags: CWE-525 - [HCL AION is susceptible to Bypass of the script allow list configuration vulnerability](https://agentprime.io/advisories/CVE-2025-52624.md) `CVE-2025-52624` · CVE record: HCL AION · CVSS 5.4 Medium · Not analysed yet · Published 10 Oct 2025 · Tags: CWE-1032 - [HCL AION is susceptible to Trusted types in scripts not enforced in CSP](https://agentprime.io/advisories/CVE-2025-52635.md) `CVE-2025-52635` · CVE record: HCL AION · CVSS 3.7 Low · Not analysed yet · Published 10 Oct 2025 · Tags: CWE-1032 - [HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability](https://agentprime.io/advisories/CVE-2025-52632.md) `CVE-2025-52632` · CVE record: HCL AION · CVSS 6.5 Medium · Not analysed yet · Published 10 Oct 2025 · Tags: CWE-614 - [HCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerability](https://agentprime.io/advisories/CVE-2025-52630.md) `CVE-2025-52630` · CVE record: HCL AION · CVSS 3.7 Low · Not analysed yet · Published 10 Oct 2025 · Tags: Information disclosure - [HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed](https://agentprime.io/advisories/CVE-2025-52634.md) `CVE-2025-52634` · CVE record: HCL HCL AION · CVSS 3.7 Low · Not analysed yet · Published 10 Oct 2025 · Tags: Information disclosure - [HCL AION is susceptible to Inline script execution allowed in CSP vulnerability](https://agentprime.io/advisories/CVE-2025-52650.md) `CVE-2025-52650` · CVE record: HCL HCL AION · CVSS 8.2 High · Not analysed yet · Published 10 Oct 2025 · Tags: CWE-1032 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .