CVE-2025-62311— HCL AION 安全漏洞
Possible ATT&CK Techniques 1AI
T1043新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2025-62311の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels.
ソース: CVE Program / CVE List V5
脆弱性説明
HCL AION is affected by a vulnerability where backend service details may be transmitted over insecure HTTP channels. This may expose sensitive information to potential interception or unauthorized access during transmission under certain conditions
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
ソース: CVE Program / CVE List V5
脆弱性タイプ
敏感数据的明文传输
ソース: CVE Program / CVE List V5
脆弱性タイトル
HCL AION 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
HCL AION是印度HCL公司的一款AI生命周期管理平台。 HCL AION存在安全漏洞，该漏洞源于后端服务细节可能通过不安全的HTTP通道传输，可能导致敏感信息在传输过程中被拦截或未经授权访问。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2025-62311の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2025-62311のインテリジェンス情報
请登录查看更多情报信息。
CVE-2025-62311 厂商安全公告 (1)
Same Patch Batch · HCL · 2026-05-14 · 9 CVEs total
| CVE-2025-62313 | 5.4 MEDIUM | HCL AION is affected by a vulnerability where adequate protections against brute-force att |
| CVE-2025-62310 | 5.4 MEDIUM | HCL AION is affected by a vulnerability where encryption is not enforced for certain data |
| CVE-2025-62305 | 5.1 MEDIUM | HCL AION is affected by a vulnerability where certain operations may trigger out-of-band i |
| CVE-2025-62308 | 5.1 MEDIUM | HCL AION is affected by a vulnerability where sensitive backend infrastructure details may |
| CVE-2025-62312 | 3.0 LOW | HCL AION is affected by a vulnerability where basic authorization tokens are used for auth |
| CVE-2025-62309 | 2.6 LOW | HCL AION is affected by a vulnerability where auto-complete functionality is enabled for c |
| CVE-2025-62317 | 2.6 LOW | HCL AION is affected by a vulnerability where sensitive information may be included in URL |
| CVE-2025-62316 | 2.3 LOW | HCL AION is affected by a vulnerability where certain security-related HTTP response heade |
IV. 関連脆弱性
同じ製品: AION
- CVE-2025-62305
HCL AION is affected by a vulnerability where certain operat - CVE-2025-62317
HCL AION is affected by a vulnerability where sensitive info - CVE-2025-62308
HCL AION is affected by a vulnerability where sensitive back - CVE-2025-62309
HCL AION is affected by a vulnerability where auto-complete - CVE-2025-62312
HCL AION is affected by a vulnerability where basic authoriz
同じベンダー: HCL
- CVE-2025-59874
HCL Hive Telco Observability is affected by a Required dire - CVE-2025-52606
HCL iControl was affected by Weak Input Validation vulnerabi - CVE-2025-52608
HCL iControl was affected by Missing Cookie Attributes vuln - CVE-2025-52609
HCL iControl was affected by Missing Security Headers vulner - CVE-2025-52611
HCL iControl was affected by Unhandled Exception - Stack Tra
同じ弱点: CWE-319
- CVE-2026-3182
Sensitive Data Exposure - CVE-2026-48022
@hapi/wreck: Sensitive credential headers leak across cross- - CVE-2026-34346
Windows Ancillary Function Driver for WinSock Information Di - CVE-2026-53624
Fiber: HSTS header never set in helmet middleware due to inc - CVE-2025-12530
Vulnerabilities found in Watson Data Intelligence
V. CVE-2025-62311へのコメント
まだコメントはありません