CVE-2025-52637

Multiple security vulnerabilities affect HCL AION

Medium · published March 16, 2026

CVSS v3.1
4.5
EPSS
0%
Percentile
13.5
In the wild
Unconfirmed
What it is

HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. Improper validation or restrictions on query execution could expose the system to unintended database interactions or limited information exposure under specific conditions.

The record
Technical detail
CVSS v3.1
4.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00234 · 13.5th percentile
Published
2026-03-16T12:27Z
EPSS history
Timeline
  • 16 MAR 12:27Z
    Multiple security vulnerabilities affect HCL AION
    cvelistv5