AION vulnerabilities
4 known vulnerabilities in AION from HCL Software. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
AION: Weak Password Requirements
HCL AION version 2 is affected by a Weak Password Policy vulnerability. This can allow the use of easily guessable passwords, potentially resulting in unauthorized access
- 9.8 Critical severity
AION: Unrestricted Upload of File with Dangerous Type
HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise.
- 9.8 Critical severity
AION: Improper Neutralization of HTTP Headers for Scripting Syntax
HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise.
- 7.5 High severity
AION: Use of Web Browser Cache Containing Sensitive Information
HCL AION version 2 is affected by a Cacheable HTTP Response vulnerability. This may lead to unintended storage of sensitive or dynamic content, potentially resulting in unauthorized access or information disclosure.