CVE-2025-62317CWE-598

CVE-2025-62317

Low · published May 14, 2026

CVSS v3.1
2.6
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary systems, potentially leading to unintended information disclosure under certain conditions.

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00115 · 1.5th percentile
Weakness
CWE-598 · Use of HTTP Request With Sensitive Query String
Published
2026-05-14T21:16Z
References (1)
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636 · [email protected]
EPSS history
Timeline
  • 14 MAY 16:13Z
    HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.
    cvelistv5