CVE-2025-62316 | BDVDB-2026-333147 Detail
HCLAION
Description#
HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based security controls and could expose the application to limited security risks under specific conditions.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: adjacent.
Weaknesses#
- CWE-1021 Improper Restriction of Rendered UI Layers or Frames
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.