Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/10/11 10:31 a.m.2 views

CVE-2025-52624

A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0...

5.4CVSS6.3AI score0.00025EPSS
Exploits0References1
OSV
OSV
added 2025/10/10 11:15 a.m.0 views

CVE-2025-52624

A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0...

6.1CVSS5.6AI score
Exploits0References1
NVD
NVD
added 2025/10/10 11:15 a.m.3 views

CVE-2025-52624

A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0...

6.1CVSS0.00025EPSS
Exploits0References1
CVE
CVE
added 2025/10/10 10:25 a.m.7 views

CVE-2025-52624

CVE-2025-52624 affects HCL AION 2.0. The issue is a bypass of the script allowlist caused by misconfigured Content-Security-Policy, enabling unauthorized scripts and increasing risk of cross-site scripting and other injection attacks. Connected sources confirm the vulnerability in HCL AION and de...

6.1CVSS5.9AI score0.00025EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/10 10:25 a.m.3 views

EUVD-2025-33699

A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0...

5.4CVSS5.8AI score0.00025EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/10 10:25 a.m.5 views

CVE-2025-52624 HCL AION is susceptible to Bypass of the script allow list configuration vulnerability

A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0...

5.4CVSS0.00025EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/10 10:25 a.m.5 views

CVE-2025-52624 HCL AION is susceptible to Bypass of the script allow list configuration vulnerability

A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0...

5.4CVSS5.9AI score0.00025EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.4 views

PT-2025-41544

Name of the Vulnerable Software and Affected Versions HCL AION version 2.0 Description An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks. This is due to a bypass of the...

5.4CVSS5.8AI score0.00025EPSS
Exploits0References5
Rows per page
Query Builder