CVE-2025-62311

HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interception or unauthorized access during transmission under certain conditions

CVSS 3.1

4.3CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

EPSS

0.08% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-25)

CWE

CWE-319

Published

2026-05-14

Modified

2026-10-07

Record from

the NVD, synced 2026-10-19

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636

Check your stackJSON