Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

HCL — Vulnerabilities & Security Advisories 89

Browse all 89 CVE security advisories affecting HCL. AI-powered Chinese analysis, POCs, and references for each vulnerability.

HCL Technologies operates as a global information technology services provider, primarily focusing on software engineering, business process services, and infrastructure management. With fifty-seven recorded Common Vulnerabilities and Exposures (CVEs), the organization’s security posture reflects risks inherent in its extensive software portfolio and enterprise solutions. Historically, identified flaws frequently involve remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from third-party dependencies or configuration errors within its Domino and Notes platforms. These issues highlight challenges in maintaining secure codebases across complex, legacy-integrated systems. While no catastrophic public breaches have been widely attributed directly to these specific CVEs, the volume of disclosures underscores the necessity for rigorous patch management and continuous vulnerability assessment. The company continues to address these technical debt issues through regular security updates and enhanced development lifecycle protocols to mitigate exposure in its diverse client environments.

Found 32 results / 89 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2025-62305 HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions — AION CWE-201 5.1 Medium 2026-05-14
CVE-2025-62317 HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. — AION CWE-598 2.6 Low 2026-05-14
CVE-2025-62308 HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed — AION CWE-201 5.1 Medium 2026-05-14
CVE-2025-62309 HCL AION is affected by a vulnerability where auto-complete functionality is enabled for certain input fields. — AION CWE-201 2.6 Low 2026-05-14
CVE-2025-62312 HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication — AION CWE-522 3.0 Low 2026-05-14
CVE-2025-62316 HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured — AION CWE-1021 2.3 Low 2026-05-14
CVE-2025-62313 HCL AION is affected by a vulnerability where adequate protections against brute-force attempts are not enforced. — AION CWE-307 5.4 Medium 2026-05-14
CVE-2025-62311 HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. — AION CWE-319 4.3 Medium 2026-05-14
CVE-2025-62310 HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations — AION CWE-319 5.4 Medium 2026-05-14
CVE-2025-52641 Internal Filesystem Exploration vulnerability — AION 2.9 Low 2026-04-15
CVE-2025-52642 HCL AION is affected by an internal filesystem paths disloser vulnerability — AION 3.3 Low 2026-03-16
CVE-2025-52646 HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. — AION 2.2 Low 2026-03-16
CVE-2025-52645 HCL AION is affected by a vulnerability where model packaging and distribution mechanisms may not include sufficient authenticity verification. — AION 1.9 Low 2026-03-16
CVE-2025-52649 HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature — AION 1.8 Low 2026-03-16
CVE-2025-52644 HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. — AION 5.8 Medium 2026-03-16
CVE-2025-52643 HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment — AION 4.7 Medium 2026-03-16
CVE-2025-52636 HCL AION is affected by a improper handling of uploads files Size — AION 1.8 Low 2026-03-16
CVE-2025-52648 HCL AION 安全漏洞 — AION 4.8 Medium 2026-03-16
CVE-2025-52638 Multiple security vulnerabilities affect HCL AION — AION 5.6 Medium 2026-03-16
CVE-2025-52637 Multiple security vulnerabilities affect HCL AION — AION 4.5 Medium 2026-03-16
CVE-2025-52631 HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. — AION CWE-200 3.7 Low 2026-02-03
CVE-2025-52623 HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability — AION CWE-522 3.7 Low 2026-02-03
CVE-2025-52628 HCL AION is susceptible to Missing SameSite vulnerability — AION CWE-1275 4.6 Medium 2026-02-03
CVE-2025-52633 HCL AION is susceptible to Missing Content-Security-Policy — AION CWE-539 3.1 Low 2026-02-03
CVE-2025-52629 HCL AION is susceptible to Missing Content-Security-Policy — AION CWE-1032 3.7 Low 2026-02-03
CVE-2025-52626 HCL AION is susceptible to Potential Command Injection vulnerability — AION CWE-78 4.5 Medium 2026-02-03
CVE-2025-52627 HCL AION is susceptible to Incorrect Permission Assignment for Critical Resource — AION CWE-732 5.5 Medium 2026-02-03
CVE-2025-52625 HCL AION is susceptible to Cacheable SSL Page Found vulnerability — AION CWE-525 3.7 Low 2025-10-10
CVE-2025-52624 HCL AION is susceptible to Bypass of the script allow list configuration vulnerability — AION CWE-1032 5.4 Medium 2025-10-10
CVE-2025-52635 HCL AION is susceptible to Trusted types in scripts not enforced in CSP — AION CWE-1032 3.7 Low 2025-10-10

This page lists every published CVE security advisory associated with HCL. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.