PT-2025-41540 · Hcl · Hcl Aion

Published 2025-10-10 · Updated 2025-10-24 · CVE-2025-52650

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions HCL AION version 2.0

Description An issue exists in HCL AION version 2.0 related to Content Security Policy (CSP) enforcement. Improper CSP configuration allows for the execution of inline scripts, which should be blocked. This enables an attacker to inject and execute malicious scripts within the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1032

Related Identifiers

CVE-2025-52650

Affected Products

Hcl Aion

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-52650 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124444 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-52650 · Vendor Advisory
• https://t.me/CVEtracker/34568 · Telegram Post
• https://twitter.com/CveTodo/status/1976596090712461775 · Twitter Post
• https://t.me/cveNotify/140281 · Telegram Post
• https://twitter.com/cracbot/status/1978415607721996300 · Twitter Post
• https://twitter.com/CVEnew/status/1976586103210537158 · Twitter Post
• https://t.me/cveNotify/138129 · Telegram Post