SQL Injection Vulnerability in HCL AION Product
CVE-2025-52637

4.5MEDIUM

Key Information:

Vendor

HCL Software
Status
Aion
Vendor
CVE Published:
16 March 2026

What is CVE-2025-52637?

HCL AION is susceptible to an SQL injection vulnerability due to inadequate validation of certain configuration offerings. This weakness may allow an attacker to execute harmful SQL queries, potentially leading to unauthorized database interactions and exposure of sensitive information under specific circumstances. Organizations utilizing HCL AION are advised to review configurations and implement appropriate validation controls to mitigate this risk.

Affected Version(s)

AION 2.0

References

https://support.hcl-software.com/csm?id=kb_article&syspar...

CVSS V3.1

Score:
4.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.