HCL AION vulnerabilities and CVEs
Known vulnerabilities affecting HCL AION, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.
18 vulnerabilities tracked.
- 6.5 HCL AION is affected by a vulnerability where the application trusted the value of the HTTP Host header supplied in requests without…
- 6.5 HCL AION is affected by a vulnerability where user-controlled input could be included in HTTP response headers without proper…
- 5.4 HCL AION is affected by a vulnerability where encrypted (HTTPS) communication was not enforced for all requests.
- 4.8 HCL AION is affected by a vulnerability where the Cross-Origin-Opener-Policy (COOP) header was missing or insecure, allowing cross-origin…
- 4.8 HCL AION is affected by a vulnerability where the Cross-Origin-Resource-Policy (CORP) header was missing or insecure, allowing application…
- 4.7 HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface (UserMenu component).
- 4.7 HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface (UserContext component,…
- 4.7 HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface (UserContext component,…
- 4.7 HCL AION is affected by an open redirect vulnerability on the user registration page (Signup component).
- 4.7 HCL AION is affected by an open redirect vulnerability on the role assignment pending page (RoleAssignPending component).
- 4.7 HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface (Navbar component).
- 4.2 HCL AION is affected by a vulnerability where the Cross-Origin-Embedder-Policy (COEP) header was missing or insecure, so embedded…
- 3.7 HCL AION is affected by a missing encryption vulnerability in a second WebSocket connection defined in the GenAI web interface.
- 3.7 HCL AION is affected by a missing encryption vulnerability in the WebSocket connection set up by the GenAI web interface.
- 3.7 HCL AION is affected by a vulnerability where pages served over HTTPS could be cached by the browser or intermediate proxies.
- 3.7 HCL AION is affected by a vulnerability where the X-Content-Type-Options header was missing or insecure, allowing browsers to MIME-sniff…
- 3.1 HCL AION is affected by a vulnerability where certain application responses revealed internal server file system paths.
- 3.1 HCL AION is affected by a vulnerability where the Content-Security-Policy (CSP) security response header was missing from application…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that HCL AION is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other products tracked here
Linux Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Chrome Red Hat Enterprise Linux 10 macOS API Connect Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Red Hat Enterprise Linux 9.6 Extended Update Support Zephyr Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat Enterprise Linux 7 Extended Lifecycle Support Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On iOS and iPadOS Windows Server 2022 Red Hat Hardened Images Windows 11 Version 24H2 Windows 11 version 26H1 Windows 11 Version 25H2 Windows Server 2025