CVE-2025-52659CWE-525

HCL AION is affected by a Cacheable HTTP Response vulnerability

Low · published January 19, 2026

CVSS v3.1
2.8
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability. This may lead to unintended storage of sensitive or dynamic content, potentially resulting in unauthorized access or information disclosure.

The record
Technical detail
CVSS v3.1
2.8 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00190 · 8.2th percentile
Weakness
CWE-525 · Use of Web Browser Cache Containing Sensitive Information
Published
2026-01-19T17:54Z
EPSS history
Timeline
  • 19 JAN 17:54Z
    HCL AION is affected by a Cacheable HTTP Response vulnerability
    cvelistv5