CVE-2025-62310 - HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations

Back Back to CVE browser

MEDIUM

HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations

Published May 14, 2026

5.4

MEDIUM

CVSS 3.1

EPSS 0.05%

Description

HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations. This may expose sensitive information to potential interception or unauthorized access under specific conditions.

Affected products

Vendor HCL Product AION Default
unaffected
- Version
  2.1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

HCL

AION

unaffected

Version	Status	Constraints
2.1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-319

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209851		Advisory
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner HCL

Published May 14, 2026

Updated May 14, 2026

Reserved Oct 10, 2025

Link CVE-2025-62310

CISA Vulnrichment

Updated May 14, 2026

NVD

Status Deferred

Modified Oct 7, 2026

Link CVE-2025-62310

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-62310

ENISA EUVD

Assigner HCL

Published May 14, 2026

Updated May 14, 2026

Exploited since n/a

Link EUVD-2025-209851

EUVD-2025-209851