CVE-2025-52660

HCL AION is affected by an Host Header Injection vulnerability PUBLISHED

Description (CNA)

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise.

Affected (CNA)

Vendor / product	Versions
HCL Software / AION	affected 2

CWE

CWE-644

References

https://support.hcl-software.com/kb_view.do?sys_kb_id=4b92474633de7ad4159a05273e5c7b4b&searchTerm=kb0127995#

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.