Exposed Backend Infrastructure Details in HCL AION
CVE-2025-62308

5.1MEDIUM

Key Information:

Status
Vendor
CVE Published:
14 May 2026

What is CVE-2025-62308?

HCL AION has a security issue that could lead to the exposure of sensitive backend infrastructure details. This vulnerability may allow unauthorized individuals to gain insight into internal system architecture or configuration specifics. Such exposure could facilitate further exploitation by enabling targeted actions, thereby increasing the risk of a potential security breach.

Affected Version(s)

AION 2.1.0

References

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.