CVE-2025-62312

HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse, especially if not combined with secure transmission practices.

CVSS 3.1

3.0CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

EPSS

0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-25)

CWE

CWE-522

Published

2026-05-14

Modified

2026-10-07

Record from

the NVD, synced 2026-10-19

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636

Check your stackJSON