VULNERABILITY INTELLIGENCE
CVE-2025-62317
CVSS score2.6 LOW
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-05-14
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N
Description
HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary systems, potentially leading to unintended information disclosure under certain conditions.
Weakness classification
- psirt@hcl.com: CWE-598