CVE-2025-62317 | BDVDB-2026-333148 Detail
HCLAION
Description#
HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary systems, potentially leading to unintended information disclosure under certain conditions.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: adjacent.
Weaknesses#
- CWE-598 Use of HTTP Request With Sensitive Query String
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.