Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/10/11 10:31 a.m.•29 views

CVE-2025-52624

A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0...

5.4CVSS6.3AI score0.002EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/10 11:15 a.m.•15 views

CVE-2025-52624

A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0...

6.1CVSS5.6AI score0.002EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/10 10:25 a.m.•9 views

CVE-2025-52624 HCL AION is susceptible to Bypass of the script allow list configuration vulnerability

A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0...

5.4CVSS5.7AI score0.002EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/10 10:25 a.m.•50 views

CVE-2025-52624 HCL AION is susceptible to Bypass of the script allow list configuration vulnerability

A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0...

5.4CVSS0.002EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/10 10:25 a.m.•52 views

CVE-2025-52624

CVE-2025-52624 affects HCL AION 2.0. The issue is a bypass of the script allowlist caused by misconfigured Content-Security-Policy, enabling unauthorized scripts and increasing risk of cross-site scripting and other injection attacks. Connected sources confirm the vulnerability in HCL AION and de...

6.1CVSS5.7AI score0.002EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•3 views

CVE-2025-52624: Improper Neutralization of Input During Web Page Generation

A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other injection-based attacks.This issue affects AION: 2.0...

6.1CVSS5.7AI score0.002EPSS
SaveExploits0References4
Rows per page
Query Builder