CVE-2025-52649
HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature.
Published Mar 16, 2026 · updated Jun 17, 2026 · hcltech aion
HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature. Predictable identifiers may allow an attacker to infer or guess system-generated values, potentially leading to limited information disclosure or unintended access under specific conditions.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 16, 2026 · NIST NVD
Detected
HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature. Predictable identifiers may allow an attacker to infer or guess system-generated values, potentially leading to limited information disclosure or unintended access under specific conditions.
Jun 17, 2026 · NIST NVD
Updated
HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature. Predictable identifiers may allow an attacker to infer or guess system-generated values, potentially leading to limited information disclosure or unintended access under specific conditions.
Affected
- cpe hcltech/aionversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2025-52649
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2025-52649
HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature. Predictable identifiers may allow an attacker to infer or guess system-generated values, potentially leading to limited information disclosure or unintended access under specific condi
nvd.nist.gov