CVE Catalog

CVE-2025-62315

LowCVSS 3.4
Published: Updated: Translated: NVD NIST

Summary

HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input validation. Unexpected or crafted input may be accepted by the application, potentially resulting in unintended behavior or security impact under certain conditions.

Risk Assessment

The risk is that an attacker could exploit the lack of validation to inject malicious data, potentially leading to unintended application behavior or security compromise.

Recommendation

It is recommended to implement proper server-side input validation mechanisms and update HCL AION to the latest version if a patch is available.

Original NVD description (English source)

HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input validation. Unexpected or crafted input may be accepted by the application, potentially resulting in unintended behavior or security impact under certain conditions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS