5.6
CVE-2025-62314
- EPSS 0.1%
- Veröffentlicht 13.08.2026 13:17:09
- Zuletzt bearbeitet 13.08.2026 16:17:52
- CVE-Watchlists
- Unerledigt
HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted without adequate rate limiting or challenge mechanisms, potentially resulting in unintended behavior or security impact under certain conditions.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerHCL Software
≫
Produkt
AION
Default Statusunaffected
Version
v2.1.0
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.1% | 0.011 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| psirt@hcl.com | 5.6 | 0.9 | 4.7 |
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H
|
CWE-307 Improper Restriction of Excessive Authentication Attempts
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133084