Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1032: OWASP Top Ten 2017 Category A6 - Security Misconfiguration

Category Incomplete Mapping prohibited

Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2017.

Source: MITRE CWE-1032

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-21833

    HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833)

    HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured. CSP helps prevent attacks such as Cross-Site Scripting (XSS) by restricting the sources from which scripts, styles, and other resources …

    HCL Software AION
  • Low 3.7
    CVE-2025-52629

    HCL AION is susceptible to Missing Content-Security-Policy

    HCL AION is susceptible to Missing Content-Security-Policy.  An The absence of a CSP header may increase the risk of cross-site scripting and other content injection attacks by allowing unsafe scripts or resources to execute..This issue affects AION: 2.0.

    HCL AION
  • Low 3.7
    CVE-2025-52635

    HCL AION is susceptible to Trusted types in scripts not enforced in CSP

    A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0.

    HCL AION