CVE-2025-52633

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

HCL AION is affected by a Permanent Cookie Containing Sensitive Session Information vulnerability. It is storing sensitive session data in persistent cookies may increase the risk of unauthorized access if the cookies are intercepted or compromised. This issue affects AION: 2.0.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-539

Affected software

No affected versions have been published.

Timeline

Published
Feb 3, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-526347.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in HCL AION This issue affects HCL AION: 2.0.CVE-2025-526359.8A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0.CVE-2025-526367.5HCL AION is affected by a vulnerability related to the handling of upload size limits. Improper control or validation of upload sizes may alCVE-2025-526377.3HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. ImproCVE-2025-526387.2HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges. Running containers with CVE-2025-526396.5HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sensitive information tCVE-2025-52644.8Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command,CVE-2025-526404.7HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separatCVE-2025-526415.3HCL AION is affected by a vulnerability where certain system behaviours may allow exploration of internal filesystem structures. Exposure ofCVE-2025-526426.5HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour. ExCVE-2025-526437.8HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environmCVE-2025-526448.2HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of proper auditing mech
CVE-2025-52633: Medium severity, CVSS 5.3 | Vulnix