CVE-2025-62311CWE-319

CVE-2025-62311

Medium · published May 14, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interception or unauthorized access during transmission under certain conditions

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00080 · 0.2th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-05-14T21:16Z
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636 · [email protected]
EPSS history
Timeline
  • 14 MAY 16:06Z
    HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.
    cvelistv5