Lucene search
+L

6 matches found

NVD
NVD
•added 2026/11/06 2:17 p.m.•4 views

CVE-2026-35112

HCL AION is affected by a vulnerability where the Cross-Origin-Embedder-Policy COEP header was missing or insecure, so embedded cross-origin resources were not required to explicitly grant permission. This weakens cross-origin isolation, potentially resulting in unintended behavior or security...

4.2CVSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/06 1:26 p.m.•5 views

EUVD-2026-118235

HCL AION is affected by a vulnerability where the Cross-Origin-Embedder-Policy COEP header was missing or insecure, so embedded cross-origin resources were not required to explicitly grant permission. This weakens cross-origin isolation, potentially resulting in unintended behavior or security...

4.2CVSS5.8AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/06 1:26 p.m.•11 views

CVE-2026-35112 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a vulnerability where the Cross-Origin-Embedder-Policy COEP header was missing or insecure, so embedded cross-origin resources were not required to explicitly grant permission. This weakens cross-origin isolation, potentially resulting in unintended behavior or security...

4.2CVSS
SaveExploits0References1
CVE
CVE
•added 2026/11/06 1:26 p.m.•7 views

CVE-2026-35112

HCL AION is affected by a vulnerability involving a missing or insecure Cross-Origin-Embedder-Policy (COEP) header. This flaw prevents embedded cross-origin resources from being required to explicitly grant permission, which weakens cross-origin isolation and could lead to unintended behavior or ...

4.2CVSS5.8AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/06 12:00 a.m.•4 views

CVE-2026-35112: HCL Software HCL AION: HCL AION is affected by a vulnerability where the Cross-Origin-Embedder-Policy (COEP) header was missing or insecure,…

HCL AION is affected by a vulnerability where the Cross-Origin-Embedder-Policy COEP header was missing or insecure, so embedded cross-origin resources were not required to explicitly grant permission. This weakens cross-origin isolation, potentially resulting in unintended behavior or security...

4.2CVSS5.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/15 12:00 a.m.•31 views

PT-2025-51235

Name of the Vulnerable Software and Affected Versions Convercent Whistleblowing Platform versions affected versions not specified Description The application exhibits a protection mechanism failure in browser and session handling. It lacks essential HTTP security headers, including...

6.9CVSS6.2AI score0.00075EPSS
SaveExploits0References8
Rows per page
Query Builder