Upload Size Limit Vulnerability in HCL AION Software
CVE-2025-52636

1.8LOW

Key Information:

Vendor

HCL Software
Status
Aion
Vendor
CVE Published:
16 March 2026

What is CVE-2025-52636?

HCL AION is impacted by a vulnerability stemming from inadequate handling of upload size limits. This oversight may permit excessive resource consumption, leading to potential service degradation or denial-of-service scenarios when excessive data is processed. Administrators should implement proper validation mechanisms to mitigate the risk associated with this vulnerability.

Affected Version(s)

AION 2.0

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
1.8
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.