3.1Niedrig
CVE-2025-55251HCL AION is affected by an Unrestricted File Upload vulnerability
Beschreibung
HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise.
Schwachstellentyp (CWE):
CWE-434
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| HCL Software | AION | 2 | |
| hcltech | aion | 2.0.0 |
Referenzen und Patches
CPE-Treffer (NVD) (1)
cpe:2.3:a:hcltech:aion:2.0.0:*:*:*:*:*:*:*