AI
Product
Aion
by Hcltech · last CVE Apr 15, 2026
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 11Medium 13Low 0
Watch

Add Aion to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-52642
6.5
0%
Mar 16
HCL AION is affected by an internal filesystem paths disloser vulnerability
Affected: 2.0.0 before 2.1.2
CVE-2025-52623
6.5
0%
Feb 3
HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability
Affected: 2.0.0
CVE-2025-52629
6.1
0%
Feb 3
HCL AION is susceptible to Missing Content-Security-Policy
Affected: 2.0.0
CVE-2025-52624
6.1
0%
Oct 10
HCL AION is susceptible to Bypass of the script allow list configuration vulnerability
Affected: 2.0.0
CVE-2025-52650
6.1
0%
Oct 10
HCL AION is susceptible to Inline script execution allowed in CSP vulnerability
Affected: 2.0.0
CVE-2025-52641
5.3
0%
Apr 15
Internal Filesystem Exploration vulnerability
Affected: 2.0.0 before 2.1.2
CVE-2025-52646
5.3
0%
Mar 16
HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.
Affected: 2.0.0 before 2.1.2
CVE-2025-52645
5.3
0%
Mar 16
HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.
Affected: 2.0.0 before 2.1.2
CVE-2025-52649
5.3
0%
Mar 16
HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature
Affected: 2.0.0 before 2.1.2
CVE-2025-52633
5.3
0%
Feb 3
HCL AION is susceptible to Missing Content-Security-Policy
Affected: 2.0.0
CVE-2025-55250
5.3
0%
Jan 19
HCL AION is affected by a Technical Error Disclosure vulnerability
Affected: 2.0.0
CVE-2025-52661
5.3
0%
Jan 19
HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability
Affected: 2.0.0
CVE-2025-55249
5.3
0%
Jan 19
HCL AION is affected by a Missing Security Response Headers vulnerability.
Affected: 2.0.0
Showing 13