Findings

CVE-2025-62312

HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication.

Published May 14, 2026 · updated Oct 7, 2026

HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse, especially if not combined with secure transmission practices.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 14, 2026 · NIST NVD

    Detected

    HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse, especially if not combined with secure transmission practices.

  2. Oct 7, 2026 · NIST NVD

    Updated

    HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse, especially if not combined with secure transmission practices.

Sources

  • CVE.orgVulnerability recordCVE-2025-62312

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-62312

    HCL AION is affected by a vulnerability where basic authorization tokens are used for authentication. Use of basic authorization mechanisms may expose credentials to potential interception or misuse, especially if not combined with secure transmission practices.

    nvd.nist.gov

References

CVE-2025-62312 · ZeroDay Findings