CVE-2025-52650 HIGH

CVE-2025-52650: HCL AION is susceptible to Inline script execution allowed in CSP vulnerability

Vendor Hcl
Product HCL AION
Weakness CWE-1032
Published October 10, 2025
Last update October 10, 2025
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N

What the vulnerability does

01Description

Inline script execution allowed in CSP vulnerability has been identified in HCL AION v2.0

Key dates

02Disclosure timeline

October 10, 2025 CVE published
October 10, 2025 Record updated