3.1Baja
CVE-2025-55251HCL AION is affected by an Unrestricted File Upload vulnerability
Descripción
HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise.
Debilidad (CWE):
CWE-434
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| HCL Software | AION | 2 | |
| hcltech | aion | 2.0.0 |
Referencias y parches
Coincidencias CPE (NVD) (1)
cpe:2.3:a:hcltech:aion:2.0.0:*:*:*:*:*:*:*