CVE-2025-55249CWE-693

HCL AION is affected by a Missing Security Response Headers vulnerability.

Low · published January 19, 2026

CVSS v3.1
3.5
EPSS
0%
Percentile
10.1
In the wild
Unconfirmed
What it is

HCL AION is affected by a Missing Security Response Headers vulnerability. The absence of standard security headers may weaken the application’s overall security posture and increase its susceptibility to common web-based attacks.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.1th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2026-01-19T18:01Z
EPSS history
Timeline
  • 19 JAN 18:01Z
    HCL AION is affected by a Missing Security Response Headers vulnerability.
    cvelistv5