CVE-2025-52625

A vulnerability  Cacheable SSL Page Found vulnerability has been identified in HCL AION.  Cached data may expose credentials, system identifiers, or internal file paths to attackers with access to the device or browser This issue affects AION: 2.0.

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-25)

CWE

CWE-525

Published

2025-10-10

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• hcltech:aion

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124444

Check your stackJSON