Advisories · Technology
HCL Software AION.
Every CVE that names HCL Software AION among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.7 Low
HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833)
- HCL Software AION
- CWE-1032
- CVSS 4.3 Medium
HCL AION is affected by multiple security vulnerabilities.
- HCL Software AION
- CWE-1427
- CVSS 3.4 Low
HCL AION is affected by multiple security vulnerabilities.
- HCL Software AION
- CWE-116
- CVSS 3.7 Low
HCL AION is affected by multiple security vulnerabilities.
- HCL Software AION
- Cross-site request forgery (CSRF)
- CVSS 5.6 Medium
HCL AION is affected by multiple security vulnerabilities.
- HCL Software AION
- Authentication bypass
- CVSS 4.7 Medium
HCL AION is affected by multiple security vulnerabilities.
- HCL Software AION
- Broken access control
- CVSS 3.1 Low
HCL AION is affected by a Weak Password Policy vulnerability
- HCL Software AION
- Hard-coded credentials
- CVSS 1.8 Low
HCL AION is affected by a Technical Error Disclosure vulnerability
- HCL Software AION
- Information disclosure
- CVSS 2.4 Low
Insufficient session expiration in HCL Software AION
- HCL Software AION
- Authentication bypass
- CVSS 3.5 Low
HCL AION is affected by a Missing Security Response Headers vulnerability.
- HCL Software AION
- CWE-693
- CVSS 2.8 Low
HCL AION is affected by a Cacheable HTTP Response vulnerability
- HCL Software AION
- CWE-525
- CVSS 2.7 Low
HCL AION is affected by an Host Header Injection vulnerability
- HCL Software AION
- CWE-644
- CVSS 3.1 Low
HCL AION is affected by an Unrestricted File Upload vulnerability
- HCL Software AION
- Unrestricted file upload