VULNERABILITY INTELLIGENCE
CVE-2025-52637
CVSS score4.5 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-03-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. Improper validation or restrictions on query execution could expose the system to unintended database interactions or limited information exposure under specific conditions.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-89
Primary references
- psirt@hcl.com — Vendor Advisory