HCL AION.

HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions

• HCL AION
• Information disclosure

HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.

• HCL AION
• CWE-598

HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed

• HCL AION
• Information disclosure

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.

• HCL AION
• Information disclosure

HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication

• HCL AION
• Hard-coded credentials

HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured

• HCL AION
• CWE-1021

HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced.

• HCL AION
• Authentication bypass

HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.

• HCL AION
• Weak cryptography or TLS

HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations

• HCL AION
• Weak cryptography or TLS

Internal Filesystem Exploration vulnerability

• HCL AION
• Information disclosure

HCL AION is affected by an internal filesystem paths disloser vulnerability

• HCL AION
• Information disclosure

HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.

• HCL AION
• SQL injection

HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.

• HCL AION
• CWE-345

HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature

• HCL AION
• Information disclosure

HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.

• HCL AION
• CWE-778

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment

• HCL AION
• CWE-693

HCL AION is affected by a improper handling of uploads files Size

• HCL AION
• Denial of service

Improper signature verification in HCL AION

• HCL AION
• Weak cryptography or TLS

Multiple security vulnerabilities affect HCL AION

• HCL AION
• CWE-345

Multiple security vulnerabilities affect HCL AION

• HCL AION
• SQL injection

HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability.

• HCL AION
• Information disclosure

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability

• HCL AION
• Hard-coded credentials

HCL AION is susceptible to Missing SameSite vulnerability

• HCL AION
• CWE-1275

HCL AION is susceptible to Missing Content-Security-Policy

• HCL AION
• CWE-539

HCL AION is susceptible to Missing Content-Security-Policy

• HCL AION
• CWE-1032

HCL AION is susceptible to Potential Command Injection vulnerability

• HCL AION
• Command injection

HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource

• HCL AION
• Broken access control

HCL AION is susceptible to Cacheable SSL Page Found vulnerability

• HCL AION
• CWE-525

HCL AION is susceptible to Bypass of the script allow list configuration vulnerability

• HCL AION
• CWE-1032

HCL AION is susceptible to Trusted types in scripts not enforced in CSP

• HCL AION
• CWE-1032

HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability

• HCL AION
• CWE-614

HCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerability

• HCL AION
• Information disclosure

HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed

• HCL AION
• Information disclosure

HCL AION is susceptible to Inline script execution allowed in CSP vulnerability

• HCL AION
• CWE-1032