High (8.2) in hcltech aion. EPSS 0.1% chance of exploitation in the next 30 days.
HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of proper auditing mechanisms may reduce traceability of user activities and could potentially impact monitoring, accountability, or incident investigation processes.
Severity
CVSS 3.1
8.2 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
EPSS
0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)