VULNERABILITY INTELLIGENCE

CVE-2025-52623

CVSS score3.7 LOW
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-02-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L

Description

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability. This can allow autocomplete on password fields may lead to unintended storage or disclosure of sensitive credentials, potentially increasing the risk of unauthorized access. This issue affects AION: 2.0.

Weakness classification

  • psirt@hcl.com: CWE-522

Primary references