CVE-2025-52623CWE-522

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability

Low · published February 3, 2026

CVSS v3.1
3.7
EPSS
0%
Percentile
7.1
In the wild
Unconfirmed
What it is

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability. This can allow autocomplete on password fields may lead to unintended storage or disclosure of sensitive credentials, potentially increasing the risk of unauthorized access. This issue affects AION: 2.0.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.1th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-02-03T18:12Z
EPSS history
Timeline
  • 03 FEB 18:12Z
    HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability
    cvelistv5