CVE-2025-62315

Published: Aug 13, 2026Modified: Aug 28, 2026Deferred

3.4

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

Exploitability: 1.7 / Impact: 1.4

Source: psirt@hcl.com (Secondary)

Description

HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input validation. Unexpected or crafted input may be accepted by the application, potentially resulting in unintended behavior or security impact under certain conditions.

Related CWEs

CWE-116

Improper Encoding or Escaping of Output

The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133084

Source: psirt@hcl.com

Timeline

No history available yet.