PT-2026-40958 · Hcl · Aion

Published 2026-05-14 · Updated 2026-05-14 · CVE-2025-62317

NVD

CVSS v3.1

2.6

Low

Base vector

AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N

HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary systems, potentially leading to unintended information disclosure under certain conditions.

Fix

Weakness Enumeration

CWE-598

Related Identifiers

CVE-2025-62317

Affected Products

Aion

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-62317 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636 · Note