CVE-2025-52625

A vulnerability Cacheable SSL Page Found vulnerability has been identified in HCL AION. Cached data may expose credentials, system identifiers, or internal file paths to attackers with access to the device or browser This issue affects AION: 2.0.

CVSS v3 3.7 LOW

3.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124444	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:aion:2.0.0:*:*:*:*:*:*:*

History

08 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad Cacheable SSL Page Found ha sido identificada en HCL AION. Los datos en caché pueden exponer credenciales, identificadores de sistema o rutas de archivo internas a atacantes con acceso al dispositivo o al navegador. Este problema afecta a AION: 2.0.

Information

Published : 2025-10-10 11:15

Updated : 2026-10-08 13:10

NVD link : CVE-2025-52625

Mitre link : CVE-2025-52625

CVE.ORG link : CVE-2025-52625

JSON object : View

Products Affected

hcltech

aion

CWE

CWE-525

Use of Web Browser Cache Containing Sensitive Information

{"id": "CVE-2025-52625", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-52625", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-10T15:51:19.546453Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL", "product": "AION", "versions": [{"status": "affected", "version": "2.0"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-10T11:15:42.643", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124444", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-525"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability\u00a0\n\nCacheable SSL Page Found vulnerability has been identified\n\n in HCL AION.\u00a0\n\nCached data may expose credentials, system identifiers, or internal file paths to attackers with access to the device or browser\n\nThis issue affects AION: 2.0."}, {"lang": "es", "value": "Una vulnerabilidad Cacheable SSL Page Found ha sido identificada en HCL AION. Los datos en cach\u00e9 pueden exponer credenciales, identificadores de sistema o rutas de archivo internas a atacantes con acceso al dispositivo o al navegador. Este problema afecta a AION: 2.0."}], "lastModified": "2026-10-08T13:10:00.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:aion:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEBB7E38-04AE-436B-8F21-65FF3CA3CECC"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}