Findings

CVE-2025-52644

HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged.

Published Mar 16, 2026 · updated Jun 17, 2026 · hcltech aion

HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of proper auditing mechanisms may reduce traceability of user activities and could potentially impact monitoring, accountability, or incident investigation processes.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 16, 2026 · NIST NVD

    Detected

    HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of proper auditing mechanisms may reduce traceability of user activities and could potentially impact monitoring, accountability, or incident investigation processes.

  2. Jun 17, 2026 · NIST NVD

    Updated

    HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of proper auditing mechanisms may reduce traceability of user activities and could potentially impact monitoring, accountability, or incident investigation processes.

Affected

  • cpe hcltech/aionversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-52644

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-52644

    HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of proper auditing mechanisms may reduce traceability of user activities and could potentially impact monitoring, accountability, or incident investigation process

    nvd.nist.gov

References