CVE-2025-62317

תיאור (מקור, אנגלית)

HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary systems, potentially leading to unintended information disclosure under certain conditions.

מדדים

CVSS 3.1

2.6 (LOW) מקור הציון: CNA CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-4/8/2026

CWE

CWE-598

קישורים

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130636