AI
Product
Aion
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 11Medium 13Low 0
Watch
Add Aion to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-52642 | 6.5 | Mar 16 | HCL AION is affected by an internal filesystem paths disloser vulnerability Affected: 2.0.0 before 2.1.2 |
| CVE-2025-52623 | 6.5 | Feb 3 | HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability Affected: 2.0.0 |
| CVE-2025-52629 | 6.1 | Feb 3 | HCL AION is susceptible to Missing Content-Security-Policy Affected: 2.0.0 |
| CVE-2025-52624 | 6.1 | Oct 10 | HCL AION is susceptible to Bypass of the script allow list configuration vulnerability Affected: 2.0.0 |
| CVE-2025-52650 | 6.1 | Oct 10 | HCL AION is susceptible to Inline script execution allowed in CSP vulnerability Affected: 2.0.0 |
| CVE-2025-52641 | 5.3 | Apr 15 | Internal Filesystem Exploration vulnerability Affected: 2.0.0 before 2.1.2 |
| CVE-2025-52646 | 5.3 | Mar 16 | HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. Affected: 2.0.0 before 2.1.2 |
| CVE-2025-52645 | 5.3 | Mar 16 | HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. Affected: 2.0.0 before 2.1.2 |
| CVE-2025-52649 | 5.3 | Mar 16 | HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature Affected: 2.0.0 before 2.1.2 |
| CVE-2025-52633 | 5.3 | Feb 3 | HCL AION is susceptible to Missing Content-Security-Policy Affected: 2.0.0 |
| CVE-2025-55250 | 5.3 | Jan 19 | HCL AION is affected by a Technical Error Disclosure vulnerability Affected: 2.0.0 |
| CVE-2025-52661 | 5.3 | Jan 19 | HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability Affected: 2.0.0 |
| CVE-2025-55249 | 5.3 | Jan 19 | HCL AION is affected by a Missing Security Response Headers vulnerability. Affected: 2.0.0 |
Showing 13
