Skip to content
OpenAdvisories
Low · 2.3 CVE-2025-62316 EUVD-2025-209856GHSA-76qx-w8jc-9p87

HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured

Published May 14, 2026 · Updated May 14, 2026 · Assigned by HCL

Description

HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured. Absence of these headers may reduce the effectiveness of browser-based security controls and could expose the application to limited security risks under specific conditions.

Affected products

VendorProductAffectedFixed
HCL AION 2.1.0 —

References