CVE-2025-62309CWE-201

CVE-2025-62309

Low · published May 14, 2026

CVSS v3.1
2.6
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. This may allow sensitive information to be stored in the browser, potentially leading to unintended exposure under specific conditions.

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00115 · 1.5th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2026-05-14T21:16Z
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636 · [email protected]
EPSS history
Timeline
  • 14 MAY 16:10Z
    HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields.
    cvelistv5