← Back

CVE-2025-62317

nvd nist
Published: May 14, 2026Modified: Jun 17, 2026Deferred

JSON object

Loading...
2.6
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
Exploitability: 0.9 / Impact: 1.4
Source: psirt@hcl.com (Secondary)

Description

HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary systems, potentially leading to unintended information disclosure under certain conditions.

Related CWEs

CWE-598
Use of GET Request Method With Sensitive Query Strings
The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.

References (1)

Source: psirt@hcl.com

Timeline

No history available yet.