CVE-2025-52640 — HCL AION is affected by multiple security vulnerabilities.

CVE-2025-52640

HCL AION is affected by multiple security vulnerabilities. PUBLISHED

Description (CNA)

HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or security impact under certain conditions.

Affected (CNA)

Vendor / product	Versions
HCL Software / AION	affected v2.0

CWE

No CWE identifiers supplied.

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133084

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.