Lucene search
+L

5 matches found

NVD
NVD
•added 2026/11/06 2:17 p.m.•5 views

CVE-2026-35102

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

4.7CVSS
SaveExploits0References1
CVE
CVE
•added 2026/11/06 1:32 p.m.•53 views

CVE-2026-35102

The HCL AION platform is vulnerable to an open redirect vulnerability within the navigation bar of the GenAI web interface (specifically the Navbar component ). The issue is caused by the switch-version action, which redirects the browser to a dynamically constructed URL (window origin + '/worksp...

4.7CVSS5.7AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/06 1:32 p.m.•8 views

CVE-2026-35102 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

4.7CVSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/06 1:32 p.m.•3 views

EUVD-2026-118255

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

4.7CVSS5.7AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/06 12:00 a.m.•1 views

CVE-2026-35102: HCL Software HCL AION: HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface (Navbar…

HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface Navbar component. The switch-version action redirected the browser to a dynamically constructed URL window origin + '/workspace' without validating the redirect destination. This may be used in...

4.7CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder