VulnerabilityDeferred

CVE-2025-62308

HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed.

MEDIUM 5.1EPSS 0.11%

Does this matter?

Lower severity and a low EPSS score (0.11%). Track it; it rarely justifies an emergency change on its own.

Description

HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed. Exposure of such information could reveal internal system architecture or configuration details, which may potentially assist in further analysis or targeted actions under certain conditions

CVSS 3.1: 5.1 MEDIUMCVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
EPSS: 0.11% probability · 1th percentile
CISA KEV: Not listed
Weakness: CWE-201
Source: psirt@hcl.com

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.