VulnerabilityDeferred

CVE-2025-52640

HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation.

MEDIUM 4.7EPSS 0.09%

Does this matter?

Lower severity and a low EPSS score (0.09%). Track it; it rarely justifies an emergency change on its own.

Description

HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or security impact under certain conditions.

CVSS 3.1: 4.7 MEDIUMCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L
EPSS: 0.09% probability · 0th percentile
CISA KEV: Not listed
Weakness: CWE-276
Source: psirt@hcl.com

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133084

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.