CVE-2026-35102

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

CVE-2026-35102

The HCL AION platform is vulnerable to an open redirect vulnerability within the navigation bar of the GenAI web interface (specifically the Navbar component ). The issue is caused by the switch-version action, which redirects the browser to a dynamically constructed URL (window origin + '/worksp...

CVE-2026-35102 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

EUVD-2026-118255

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

CVE-2026-35102: HCL Software HCL AION: HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface (Navbar…

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

CVE-2026-10810 itsourcecode Fees Management System navbar.php cross site scripting

A weakness has been identified in itsourcecode Fees Management System up to 1.0. Affected is an unknown function of the file /navbar.php. This manipulation of the argument page causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to t...

Unspecified Vulnerability in Oracle PeopleSoft PeopleTools Fluid Homepage and NavBar Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified security vulnerability exists in the Oracle PeopleSoft PeopleTools Fluid Homepage and NavBar component, which could be exploited by remote attackers to modify data...