VendorsHcltechaionall versions

Vulnerabilities

Hcltech Aion

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

29CVEs

HCL AION is susceptible to Potential Command Injection vulnerability

Published 2026-02-03 · Analyzed

9.8EPSS 0.006

HCL AION is affected by an Host Header Injection vulnerability

Published 2026-01-19 · Analyzed

9.8EPSS 0.003

HCL AION is susceptible to Trusted types in scripts not enforced in CSP

Published 2025-10-10 · Analyzed

9.8EPSS 0.003

HCL AION is affected by an Unrestricted File Upload vulnerability

Published 2026-01-19 · Analyzed

9.8EPSS 0.002

HCL AION is affected by a Weak Password Policy vulnerability

Published 2026-01-19 · Analyzed

9.8EPSS 0.002

HCL AION is susceptible to Missing SameSite vulnerability

Published 2026-02-03 · Analyzed

8.8EPSS 0.002

HCL AION is susceptible to Inline script execution allowed in CSP vulnerability

Published 2025-10-10 · Analyzed

8.2EPSS 0.002

HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.

Published 2026-03-16 · Analyzed

8.2EPSS 0.001

HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability.

Published 2026-02-03 · Analyzed

8.1EPSS 0.002

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment

Published 2026-03-16 · Analyzed

7.8EPSS 0.001

HCL AION is susceptible to Cacheable SSL Page Found vulnerability

Published 2025-10-10 · Analyzed

7.5EPSS 0.002

HCL AION is susceptible to Missing or insecure "X-Content-Type-Options" header vulnerability

Published 2025-10-10 · Analyzed

7.5EPSS 0.002

HCL AION is susceptible to Spring Boot Actuator Endpoints Exposed

Published 2025-10-10 · Analyzed

7.5EPSS 0.002

HCL AION is affected by a Cacheable HTTP Response vulnerability

Published 2026-01-19 · Analyzed

7.5EPSS 0.002

HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource

Published 2026-02-03 · Analyzed

7.5EPSS 0.002

HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability

Published 2025-10-10 · Analyzed

7.5EPSS 0.001

HCL AION is affected by a improper handling of uploads files Size

Published 2026-03-16 · Analyzed

7.5EPSS 0.001

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability

Published 2026-02-03 · Analyzed

6.5EPSS 0.002

HCL AION is affected by an internal filesystem paths disloser vulnerability

Published 2026-03-16 · Analyzed

6.5EPSS 0.001

HCL AION is susceptible to Bypass of the script allow list configuration vulnerability

Published 2025-10-10 · Analyzed

6.1EPSS 0.002

HCL AION is susceptible to Missing Content-Security-Policy

Published 2026-02-03 · Analyzed

6.1EPSS 0.001

HCL AION is affected by a Missing Security Response Headers vulnerability.

Published 2026-01-19 · Analyzed

5.3EPSS 0.002

HCL AION is susceptible to Missing Content-Security-Policy

Published 2026-02-03 · Analyzed

5.3EPSS 0.002

HCL AION version 2 is affected by a JWT Token Expiry Too Long vulnerability. This may increase the risk of token misuse, potentially resulting in unauthorized access if the token is compromised.

Published 2026-01-19 · Analyzed

5.3EPSS 0.002

HCL AION is affected by a Technical Error Disclosure vulnerability

Published 2026-01-19 · Analyzed

5.3EPSS 0.002

HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.

Published 2026-03-16 · Analyzed

5.3EPSS 0.001

HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature

Published 2026-03-16 · Analyzed

5.3EPSS 0.001

Internal Filesystem Exploration vulnerability

Published 2026-04-15 · Analyzed

5.3EPSS 0.001

HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.

Published 2026-03-16 · Analyzed

5.3EPSS 0.001