CVE-2025-55251: falha de baixa gravidade em HCL Software AION
HCL AION is affected by an Unrestricted File Upload vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.1epss 0.2%
HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise.
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L
Produtos afetados
HCL Software · AIONCVEs relacionadas — HCL Software AION
No mesmo produto, das mais perigosas para as menos.
CVE-2025-52660LOWHCL AION is affected by an Host Header Injection vulnerabilityEPSS 0.3%CVE-2026-21832MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-62315LOWHCL AION is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2025-55249LOWHCL AION is affected by a Missing Security Response Headers vulnerability.EPSS 0.2%CVE-2026-21833LOWHCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833)EPSS 0.2%CVE-2025-52659LOWHCL AION is affected by a Cacheable HTTP Response vulnerabilityEPSS 0.2%