CVE-2025-62314mediumCWE-307

CVE-2025-62314: falha de média gravidade em HCL Software AION

HCL AION is affected by multiple security vulnerabilities.

Publicada em

Seguir esta CVE+ Monitorar AION

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.6epss 0.1%
HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted without adequate rate limiting or challenge mechanisms, potentially resulting in unintended behavior or security impact under certain conditions.
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H
Produtos afetados
HCL Software · AION
CVEs relacionadas — HCL Software AION

No mesmo produto, das mais perigosas para as menos.

CVE-2025-52660LOWHCL AION is affected by an Host Header Injection vulnerabilityEPSS 0.3%CVE-2026-21832MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-55251LOWHCL AION is affected by an Unrestricted File Upload vulnerabilityEPSS 0.2%CVE-2025-62315LOWHCL AION is affected by multiple security vulnerabilities.EPSS 0.2%CVE-2025-55249LOWHCL AION is affected by a Missing Security Response Headers vulnerability.EPSS 0.2%CVE-2026-21833LOWHCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833)EPSS 0.2%