HCL AION 安全漏洞

HCL AION is an AI lifecycle management platform from HCL India. A security vulnerability exists in HCL AION version v2.0 that stems from allowing inline script execution in CSP environments...

PT-2025-41539

Name of the Vulnerable Software and Affected Versions HCL AION version 2.0 Description A flaw exists in HCL AION that can lead to the exposure of sensitive information to an unauthorized actor. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

CVE-2025-52635: Undefined Security Weakness

A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0...

HCL AION 安全漏洞

HCL AION is an AI lifecycle management platform from HCL India. A security vulnerability exists in HCL AION version 2.0, which stems from a cachable SSL page that could lead to the disclosure of credentials, system identifiers, or internal file paths...

CVE-2025-52625: Use of Web Browser Cache Containing Sensitive Information

A vulnerability Cacheable SSL Page Found vulnerability has been identified in HCL AION. Cached data may expose credentials, system identifiers, or internal file paths to attackers with access to the device or browser This issue affects AION: 2.0...

CVE-2025-52624: Improper Neutralization of Input During Web Page Generation

A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0...

CVE-2025-52634: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0...

HCL AION 安全漏洞

HCL AION is an AI lifecycle management platform from HCL India. HCL AION has an information disclosure vulnerability that can be exploited by attackers to cause unauthorized access...

CVE-2025-52650: Undefined Security Weakness

Inline script execution allowed in CSP vulnerability has been identified in HCL AION v2.0...

PT-2025-41546

Name of the Vulnerable Software and Affected Versions HCL AION version 2.0 Description A flaw exists in HCL AION where types in scripts are not enforced by the Content Security Policy CSP. This can potentially lead to security issues. Recommendations At the moment, there is no information about a...

HCL AION 安全漏洞

HCL AION is an AI lifecycle management platform from HCL India. HCL AION suffers from an information disclosure vulnerability due to a missing or insecure "X-Content-Type-Options" header flaw. An attacker could exploit this vulnerability to obtain credentials or system information...

CVE-2025-52630: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION.This issue affects AION: 2.0...

CVE-2025-52632: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

A Missing Secure Attribute in Encrypted Session SSL Cookie vulnerability in HCL AION.This issue affects AION: 2.0...

PT-2025-41537

Name of the Vulnerable Software and Affected Versions HCL AION version 2.0 Description A security issue exists in HCL AION that can lead to the exposure of sensitive information to an unauthorized actor. Recommendations At the moment, there is no information about a newer version that contains a...

Malicious code in aion-web3-eth-iban (npm)

The package aion-web3-eth-iban was found to contain malicious code...

MAL-2025-14180 Malicious code in aion-web3-eth-iban (npm)

The package aion-web3-eth-iban was found to contain malicious code...

Unfixed XSS vulnerability at www.aion-mmorpg.com

Security researcher warvector, has submitted on 22/12/2011 a cross-site-scripting XSS vulnerability affecting www.aion-mmorpg.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is...

CA Products That Embed Ingres Multiple Vulnerabilities

Title: CA Products That Embed Ingres Multiple Vulnerabilities CA Advisory Date: 2008-08-01 Reported By: iDefense Labs Impact: A remote attacker can execute arbitrary code, gain privileges, or cause a denial of service condition. Summary: CA products that embed Ingres contain multiple...

CVE-2006-6641: Undefined Security Weakness

Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001179060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple...