CVE-2025-62314 | BDVDB-2026-358571 Detail
HCL SoftwareAION
Description#
HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted without adequate rate limiting or challenge mechanisms, potentially resulting in unintended behavior or security impact under certain conditions.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact high. Attack vector: adjacent.
Weaknesses#
- CWE-307 Improper Restriction of Excessive Authentication Attempts
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.