CVE-2025-62310CWE-319

CVE-2025-62310

Medium · published May 14, 2026

CVSS v3.1
5.4
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations. This may expose sensitive information to potential interception or unauthorized access under specific conditions.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00049 · 0.0th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-05-14T21:16Z
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636 · [email protected]
EPSS history
Timeline
  • 14 MAY 16:05Z
    HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations
    cvelistv5