PT-2026-40952 · Hcl · Aion

Published 2026-05-14 · Updated 2026-05-14 · CVE-2025-62309

NVD

CVSS v3.1

2.6

Low

Base vector

AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2025-62309

Affected Products

Aion

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-62309 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636 · Note