๐Ÿ” CVE Alert

CVE-2025-52640

MEDIUM 4.7

HCL AION is affected by multiple security vulnerabilities.

CVSS Score
4.7
EPSS Score
0.0%
EPSS Percentile
0th

HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or security impact under certain conditions.

Vendor hcl software
Product aion
Published Aug 13, 2026
Last Updated Aug 13, 2026
Stay Ahead of the Next One

Get instant alerts for hcl software aion

Be the first to know when new medium vulnerabilities affecting hcl software aion are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
Low

Affected Versions

HCL Software / AION
v2.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
support.hcl-software.com: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133084