CVE-2025-62317
HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.
CVSS Score
2.6
EPSS Score
0.0%
EPSS Percentile
0th
HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary systems, potentially leading to unintended information disclosure under certain conditions.
| CWE | CWE-598 |
| Vendor | hcl |
| Product | aion |
| Published | May 14, 2026 |
| Last Updated | May 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for hcl aion
Be the first to know when new low vulnerabilities affecting hcl aion are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
HCL / AION
2.1.0