4.7Media

CVE-2025-52643HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment

HCL AION Publicada: (hace 8 meses)

Descripción

HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files.

Debilidad (CWE): CWE-693

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
HCL AION 2.0
hcltech aion 2.0.0 – < 2.1.2

Referencias y parches

Coincidencias CPE (NVD) (1)

  • cpe:2.3:a:hcltech:aion:*:*:*:*:*:*:*:* ≥ 2.0.0 < 2.1.2