Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 39

Export CSV
CVE-2026-35115

HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a vulnerability where the HTTP Strict-Transport-Security (HSTS) header was missing or insecurely configured, so browsers were not instructed to always use HTTPS. This may allow connections to be downgraded or intercepted, potentially resulting in unintended behavior or security impact under certain conditions.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Hcl Hcltech
Products
Aion Aion
CVE-2024-42206

HCL iReflection Use of Third party vulnerable and outdated components issue was detected in the web application.

HCL iReflection Third party vulnerable and outdated components issue was detected in the web application

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Hcl
Products
Ireflection
CVE-2025-62312

HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication

HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse, especially if not combined with secure transmission practices.

CVSS 3.1 · 3 Low EPSS < 1% KEV · Not listed
Vendors
Hcl
Products
Aion
CVE-2025-62309

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions.

CVSS 3.1 · 2.6 Low EPSS < 1% KEV · Not listed
Vendors
Hcl
Products
Aion
CVE-2025-62310

HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations

HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations. This may expose sensitive information to potential interception or unauthorized access under specific conditions.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Hcl
Products
Aion
CVE-2025-62305

HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions

HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions, potentially resulting in unintended disclosure of sensitive information. Such behaviour may allow exposure of data to external systems under specific conditions.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Hcl
Products
Aion
CVE-2025-62317

HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.

HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary systems, potentially leading to unintended information disclosure under certain conditions.

CVSS 3.1 · 2.6 Low EPSS < 1% KEV · Not listed
Vendors
Hcl
Products
Aion
CVE-2025-62308

HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed

HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed. Exposure of such information could reveal internal system architecture or configuration details, which may potentially assist in further analysis or targeted actions under certain conditions

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Hcl
Products
Aion
CVE-2025-62311

HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.

HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interception or unauthorized access during transmission under certain conditions

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hcl
Products
Aion
CVE-2025-62313

HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced.

HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. This may allow repeated authentication attempts, potentially leading to unauthorized access or account compromise under certain conditions.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Hcl
Products
Aion
CVE-2025-62316

HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured

HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based security controls and could expose the application to limited security risks under specific conditions.

CVSS 3.1 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Hcl
Products
Aion
CVE-2025-31970

HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability

HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability where the Content-Security-Policy does not define strict directives for object-src and base-uri, which could allow an attacker to exploit injection vectors such as Cross-Site Scripting (XSS)

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hcl Hcltech
Products
Dfxanalytics Dfxanalytics
CVE-2025-59851

HCL DFXAnalytics is affected by an Insecure Security Header configuration vulnerability

HCL DFXAnalytics is affected by a Using Components with Known Vulnerabilities flaw where the application utilizes unpatched libraries or sub-components, which could allow an attacker to identify and exploit publicly known security vulnerabilities to gain unauthorized access or compromise the application.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Hcl Hcltech
Products
Dfxanalytics Dfxanalytics
CVE-2025-59852

HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability

HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability where data is transmitted over the network without encryption, which could allow an attacker to compromise the confidentiality, integrity, and authentication of sensitive information.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Hcl Hcltech
Products
Dfxanalytics Dfxanalytics
CVE-2025-59853

HCL DFXAnalytics is affected by an Improper Error Handling vulnerability

HCL DFXAnalytics is affected by an Improper Error Handling vulnerability where the application exposes detailed stack traces in responses, which could allow an attacker to gain insights into the application's internal structure, code logic, and environment configurations.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Hcl Hcltech
Products
Dfxanalytics Dfxanalytics
CVE-2025-59854

HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability

HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header, which could allow an attacker to exploit browser-specific rendering flaws or bypass security controls that should instead be managed by a robust Content Security Policy (CSP).

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Hcl Hcltech
Products
Dfxanalytics Dfxanalytics
CVE-2025-31951

HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability

HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's input handling was identified that could permit unauthorized command execution.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Hcl
Products
Bigfix Runbookai
CVE-2025-62345

HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability

HCL BigFix RunBookAI is affected by a Continued availability of Less-Secure “Input Text” Vulnerability . A component contains a security weakness in its input handling implementation, increasing the risk of misconfiguration and operational errors.

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Hcl
Products
Bigfix Runbookai
CVE-2025-52637

Multiple security vulnerabilities affect HCL AION

HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. Improper validation or restrictions on query execution could expose the system to unintended database interactions or limited information exposure under specific conditions.

CVSS 3.1 · 4.5 Medium EPSS < 1% KEV · Not listed
Vendors
Hcl Hcltech
Products
Aion Aion
CVE-2025-52638

Multiple security vulnerabilities affect HCL AION

HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with root privileges may increase the potential security risk, as it grants elevated permissions within the container environment. Aligning container configurations with security best practices requires minimizing privileges and avoiding root-level execution wherever possible.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed
Vendors
Hcl Hcltech
Products
Aion Aion