CVE-2025-62311

HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interception or unauthorized access during transmission under certain conditions

Score

CVSS 3.1 4.3 Medium

Status

Deferred - psirt@hcl.com

Published

2026-05-14

Last modified

2026-10-07

Weaknesses

CWE-319

Affected products

• Aion (Hcl)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636