CVE-2025-52630

HighCVSS 7.5/10Last modified Oct 8, 2026

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION.This issue affects AION: 2.0.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Oct 10, 2025
Last modified
Oct 8, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-526318.1HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. This can allow insecure connectionCVE-2025-526327.5A Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability in HCL AION.This issue affects AION: 2.0.CVE-2025-526335.3HCL AION is affected by a Permanent Cookie Containing Sensitive Session Information vulnerability. It is storing sensitive session data in pCVE-2025-526347.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0.CVE-2025-526359.8A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0.CVE-2025-526367.5HCL AION is affected by a vulnerability related to the handling of upload size limits. Improper control or validation of upload sizes may alCVE-2025-526377.3HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. ImproCVE-2025-526387.2HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with CVE-2025-526396.5HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sensitive information tCVE-2025-52644.8Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command,CVE-2025-526404.7HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separatCVE-2025-526415.3HCL AION is affected by a vulnerability where certain system behaviours may allow exploration of internal filesystem structures. Exposure of
CVE-2025-52630: High severity, CVSS 7.5 | Vulnix