CVE-2026-35109
HCL AION is affected by multiple security vulnerabilities.
CVSS Score
3.7
EPSS Score
0.0%
EPSS Percentile
0th
HCL AION is affected by a vulnerability where pages served over HTTPS could be cached by the browser or intermediate proxies. Sensitive information in cached responses may be retrieved by an unauthorized user with access to the cache, potentially resulting in unintended behavior or security impact under certain conditions.
| CWE | CWE-535 |
| Vendor | hcl software |
| Product | hcl aion |
| Published | Nov 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for hcl software hcl aion
Be the first to know when new low vulnerabilities affecting hcl software hcl aion are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
Affected Versions
HCL Software / HCL AION
V 2.6.0