CVE-2025-62317: HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters.
HCL AION is affected by a vulnerability where sensitive information may be included in URL parameters. Passing sensitive data in URLs may expose it through browser history, logs, or intermediary systems, potentially leading to unintended information disclosure under certain conditions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62317?
CVE-2025-62317 has a medium severity rating due to the risk of exposing sensitive information in URL parameters.
How do I fix CVE-2025-62317?
To fix CVE-2025-62317, avoid passing sensitive information in URL parameters and implement alternative methods for data transmission.
What type of data is vulnerable in CVE-2025-62317?
CVE-2025-62317 exposes sensitive information that may be included in URL parameters.
Which software is affected by CVE-2025-62317?
CVE-2025-62317 affects the HCL AION software product.
What are the risks of CVE-2025-62317?
The risks of CVE-2025-62317 include data exposure through browser history, logs, and intermediary systems.