CVE-2025-62317 — HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.

CVE-2025-62317

HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. PUBLISHED

Description (CNA)

HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary systems, potentially leading to unintended information disclosure under certain conditions.

Affected (CNA)

Vendor / product	Versions
HCL / AION	affected 2.1.0

CWE

CWE-598

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.