CVE-2025-62318

{"id": "CVE-2025-62318", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-62318", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-13T15:52:06.599329Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 1.2}]}, "affected": [{"source": "psirt@hcl.com", "affectedData": [{"vendor": "HCL Software", "product": "AION", "versions": [{"status": "affected", "version": "v2.1.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-13T14:16:48.300", "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133084", "source": "psirt@hcl.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "HCL AION is affected by a vulnerability where JavaScript responses containing data could be referenced by external pages, potentially allowing sensitive information to be captured by an attacker-controlled page (JavaScript hijacking) under certain conditions."}, {"lang": "es", "value": "HCL AION est\u00e1 afectado por una vulnerabilidad donde las respuestas JavaScript que contienen datos podr\u00edan ser referenciadas por p\u00e1ginas externas, lo que podr\u00eda permitir que informaci\u00f3n sensible sea capturada por una p\u00e1gina controlada por un atacante (secuestro de JavaScript) bajo ciertas condiciones."}], "lastModified": "2026-09-29T10:10:00.263", "sourceIdentifier": "psirt@hcl.com"}