Vulnerability Database

321,821

Total vulnerabilities in the database

CVE-2025-52631

HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. This can allow insecure connections, potentially exposing the application to man-in-the-middle and protocol downgrade attacks.. This issue affects AION: 2.0.

  • Published: Feb 3, 2026
  • Updated: Feb 4, 2026
  • CVE: CVE-2025-52631
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 3.7
  • AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L

CWEs: