Approved changes feed: RSS · Atom
cpe:2.3:a:hcltech:aion:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e) |
|---|---|
| Product | Aion (d103e851-e803-5fe1-aa60-58132b8ec380) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-52649 |
vulnerable | 2026-06-08 07:31:12.817702 |
HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature
LOW (1.8)
HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature. Predictable identifiers may allow an attacker to infer or guess system-generated values, potentially leading to limited information disclosure or unintended access under specific conditions.
Published: 2026-03-16T14:36:32.396Z
Updated: 2026-03-17T14:03:14.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52646 |
vulnerable | 2026-06-08 07:31:12.813175 |
HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.
LOW (2.2)
HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. Improper validation or restrictions on query execution could expose the system to unintended database interactions or limited information exposure under specific conditions.
Published: 2026-03-16T14:42:16.317Z
Updated: 2026-03-16T20:13:31.637Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52645 |
vulnerable | 2026-06-08 07:31:12.812894 |
HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification.
LOW (1.9)
HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. This may allow the possibility of unverified or modified model artifacts being used, potentially leading to integrity concerns or unintended behaviour.
Published: 2026-03-16T14:39:12.088Z
Updated: 2026-03-16T20:14:12.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52644 |
vulnerable | 2026-06-08 07:31:12.812536 |
HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.
MEDIUM (5.8)
HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of proper auditing mechanisms may reduce traceability of user activities and could potentially impact monitoring, accountability, or incident investigation processes.
Published: 2026-03-16T14:29:03.864Z
Updated: 2026-03-16T18:27:08.587Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52643 |
vulnerable | 2026-06-08 07:31:12.812163 |
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment
MEDIUM (4.7)
HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.
Published: 2026-03-16T14:26:57.457Z
Updated: 2026-03-16T18:42:46.429Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52642 |
vulnerable | 2026-06-08 07:31:12.811707 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52641 |
vulnerable | 2026-06-08 07:31:12.811310 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52636 |
vulnerable | 2026-06-08 07:31:12.807844 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.