CVE-2025-62318

HCL AION is affected by a vulnerability where JavaScript responses containing data could be referenced by external pages, potentially allowing sensitive information to be captured by an attacker-controlled page (JavaScript hijacking) under certain conditions.

Score

CVSS 3.1 3.7 Low

Status

Deferred - psirt@hcl.com

Published

2026-08-13

Last modified

2026-08-13

Weaknesses

CWE-352

Affected products

• Aion (Hcl Software)

References

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133084