CVE-2025-52640: fallo de gravedad media en HCL Software AION
HCL AION is affected by multiple security vulnerabilities.
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.7epss 0.1%
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or security impact under certain conditions.
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
Productos afectados
HCL Software · AIONCVEs relacionadas — HCL Software AION
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-52660LOWHCL AION is affected by an Host Header Injection vulnerabilityEPSS 0.3%CVE-2026-21832MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-55251LOWHCL AION is affected by an Unrestricted File Upload vulnerabilityEPSS 0.2%CVE-2025-62315LOWHCL AION is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2025-55249LOWHCL AION is affected by a Missing Security Response Headers vulnerability.EPSS 0.2%CVE-2026-21833LOWHCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833)EPSS 0.2%