Cacheable HTTP Response Vulnerability in HCL AION Version 2
CVE-2025-52659

2.8LOW

Key Information:

Vendor

HCL Software Software

Status
Aion
Vendor
CVE Published:
19 January 2026

What is CVE-2025-52659?

HCL AION version 2 has a vulnerability related to cacheable HTTP responses. This vulnerability may result in the unintended caching of sensitive or dynamic content, which could potentially allow unauthorized users to gain access to restricted information or lead to the disclosure of sensitive data. Proper implementation and configuration are crucial for safeguarding against these risks.

Affected Version(s)

AION 2

References

https://support.hcl-software.com/kb_view.do?sys_kb_id=4b9...

CVSS V3.1

Score:
2.8
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.