agentprime: hcl-aionEvery new CVE for hcl-aion.https://agentprime.io/CVE-2025-62305: HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactionshttps://agentprime.io/advisories/CVE-2025-62305/https://agentprime.io/advisories/CVE-2025-62305/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 16:17:33 GMTCVECVE-2025-62317: HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.https://agentprime.io/advisories/CVE-2025-62317/https://agentprime.io/advisories/CVE-2025-62317/CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 16:13:34 GMTCVECVE-2025-62308: HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposedhttps://agentprime.io/advisories/CVE-2025-62308/https://agentprime.io/advisories/CVE-2025-62308/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 16:12:39 GMTCVECVE-2025-62309: HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.https://agentprime.io/advisories/CVE-2025-62309/https://agentprime.io/advisories/CVE-2025-62309/CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 16:10:49 GMTCVECVE-2025-62312: HCL AION is affected by a vulnerability where basic authorization tokens are used for authenticationhttps://agentprime.io/advisories/CVE-2025-62312/https://agentprime.io/advisories/CVE-2025-62312/CVSS 3.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 16:09:35 GMTCVECVE-2025-62316: HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configuredhttps://agentprime.io/advisories/CVE-2025-62316/https://agentprime.io/advisories/CVE-2025-62316/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 16:08:59 GMTCVECVE-2025-62313: HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced.https://agentprime.io/advisories/CVE-2025-62313/https://agentprime.io/advisories/CVE-2025-62313/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 16:07:54 GMTCVECVE-2025-62311: HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.https://agentprime.io/advisories/CVE-2025-62311/https://agentprime.io/advisories/CVE-2025-62311/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 16:06:57 GMTCVECVE-2025-62310: HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operationshttps://agentprime.io/advisories/CVE-2025-62310/https://agentprime.io/advisories/CVE-2025-62310/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 16:05:42 GMTCVECVE-2025-52641: Internal Filesystem Exploration vulnerabilityhttps://agentprime.io/advisories/CVE-2025-52641/https://agentprime.io/advisories/CVE-2025-52641/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Apr 2026 08:47:33 GMTCVECVE-2025-52642: HCL AION is affected by an internal filesystem paths disloser vulnerabilityhttps://agentprime.io/advisories/CVE-2025-52642/https://agentprime.io/advisories/CVE-2025-52642/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Mar 2026 14:45:23 GMTCVECVE-2025-52646: HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.https://agentprime.io/advisories/CVE-2025-52646/https://agentprime.io/advisories/CVE-2025-52646/CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Mar 2026 14:42:16 GMTCVECVE-2025-52645: HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.https://agentprime.io/advisories/CVE-2025-52645/https://agentprime.io/advisories/CVE-2025-52645/CVSS 1.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Mar 2026 14:39:12 GMTCVECVE-2025-52649: HCL AION is affected by a vulnerability where certain identifiers may be predictable in naturehttps://agentprime.io/advisories/CVE-2025-52649/https://agentprime.io/advisories/CVE-2025-52649/CVSS 1.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Mar 2026 14:36:32 GMTCVECVE-2025-52644: HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.https://agentprime.io/advisories/CVE-2025-52644/https://agentprime.io/advisories/CVE-2025-52644/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Mar 2026 14:29:03 GMTCVECVE-2025-52643: HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environmenthttps://agentprime.io/advisories/CVE-2025-52643/https://agentprime.io/advisories/CVE-2025-52643/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Mar 2026 14:26:57 GMTCVECVE-2025-52636: HCL AION is affected by a improper handling of uploads files Sizehttps://agentprime.io/advisories/CVE-2025-52636/https://agentprime.io/advisories/CVE-2025-52636/CVSS 1.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Mar 2026 14:21:08 GMTCVECVE-2025-52648: Improper signature verification in HCL AIONhttps://agentprime.io/advisories/CVE-2025-52648/https://agentprime.io/advisories/CVE-2025-52648/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Mar 2026 12:53:25 GMTCVECVE-2025-52638: Multiple security vulnerabilities affect HCL AIONhttps://agentprime.io/advisories/CVE-2025-52638/https://agentprime.io/advisories/CVE-2025-52638/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Mar 2026 12:35:06 GMTCVECVE-2025-52637: Multiple security vulnerabilities affect HCL AIONhttps://agentprime.io/advisories/CVE-2025-52637/https://agentprime.io/advisories/CVE-2025-52637/CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Mar 2026 12:27:48 GMTCVECVE-2025-52631: HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability.https://agentprime.io/advisories/CVE-2025-52631/https://agentprime.io/advisories/CVE-2025-52631/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 18:16:08 GMTCVECVE-2025-52623: HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerabilityhttps://agentprime.io/advisories/CVE-2025-52623/https://agentprime.io/advisories/CVE-2025-52623/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 18:12:50 GMTCVECVE-2025-52628: HCL AION is susceptible to Missing SameSite vulnerabilityhttps://agentprime.io/advisories/CVE-2025-52628/https://agentprime.io/advisories/CVE-2025-52628/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 18:06:41 GMTCVECVE-2025-52633: HCL AION is susceptible to Missing Content-Security-Policyhttps://agentprime.io/advisories/CVE-2025-52633/https://agentprime.io/advisories/CVE-2025-52633/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 18:00:05 GMTCVECVE-2025-52629: HCL AION is susceptible to Missing Content-Security-Policyhttps://agentprime.io/advisories/CVE-2025-52629/https://agentprime.io/advisories/CVE-2025-52629/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 17:54:44 GMTCVECVE-2025-52626: HCL AION is susceptible to Potential Command Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2025-52626/https://agentprime.io/advisories/CVE-2025-52626/CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 17:48:06 GMTCVECVE-2025-52627: HCL AION is susceptible to Incorrect Permission Assignment for Critical Resourcehttps://agentprime.io/advisories/CVE-2025-52627/https://agentprime.io/advisories/CVE-2025-52627/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Feb 2026 17:44:27 GMTCVECVE-2025-52625: HCL AION is susceptible to Cacheable SSL Page Found vulnerabilityhttps://agentprime.io/advisories/CVE-2025-52625/https://agentprime.io/advisories/CVE-2025-52625/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Oct 2025 10:28:53 GMTCVECVE-2025-52624: HCL AION is susceptible to Bypass of the script allow list configuration vulnerabilityhttps://agentprime.io/advisories/CVE-2025-52624/https://agentprime.io/advisories/CVE-2025-52624/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Oct 2025 10:25:32 GMTCVECVE-2025-52635: HCL AION is susceptible to Trusted types in scripts not enforced in CSPhttps://agentprime.io/advisories/CVE-2025-52635/https://agentprime.io/advisories/CVE-2025-52635/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Oct 2025 10:21:30 GMTCVECVE-2025-52632: HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerabilityhttps://agentprime.io/advisories/CVE-2025-52632/https://agentprime.io/advisories/CVE-2025-52632/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Oct 2025 10:06:04 GMTCVECVE-2025-52630: HCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerabilityhttps://agentprime.io/advisories/CVE-2025-52630/https://agentprime.io/advisories/CVE-2025-52630/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Oct 2025 09:55:59 GMTCVECVE-2025-52634: HCL AION is susceptible to Spring Boot Actuator Endpoints Exposedhttps://agentprime.io/advisories/CVE-2025-52634/https://agentprime.io/advisories/CVE-2025-52634/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Oct 2025 09:40:05 GMTCVECVE-2025-52650: HCL AION is susceptible to Inline script execution allowed in CSP vulnerabilityhttps://agentprime.io/advisories/CVE-2025-52650/https://agentprime.io/advisories/CVE-2025-52650/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Oct 2025 09:30:14 GMTCVE