This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-21850 | BDVDB-2026-400905 Detail

HCL SoftwareHCL AION

Description#

HCL AION is affected by a vulnerability where user-controlled input could be included in HTTP response headers without proper neutralization of CR/LF characters. This may allow an attacker to inject headers or split responses, potentially resulting in unintended behavior or security impact under certain conditions.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-113 Improper Neutralization of CRLF Sequences in HTTP Headers

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.