4.7Mittel

CVE-2025-52643HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment

HCL AION Veröffentlicht: (vor 8 Monaten)

Beschreibung

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.

Schwachstellentyp (CWE): CWE-693

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
HCL AION 2.0
hcltech aion 2.0.0 – < 2.1.2

Referenzen und Patches

CPE-Treffer (NVD) (1)

  • cpe:2.3:a:hcltech:aion:*:*:*:*:*:*:*:* ≥ 2.0.0 < 2.1.2