Product by Hcl Software
Hcl Aion
21 known vulnerabilities in Hcl Aion (Hcl Software), 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2026-21850 | HCL AION: HTTP Request/Response Splitting | 6.5 | |
| Medium | CVE-2026-66981 | HCL AION: Injection | 6.5 | |
| Medium | CVE-2026-35105 | HCL AION: Open Redirect | 4.7 | |
| Medium | CVE-2026-35106 | HCL AION: Open Redirect | 4.7 | |
| Medium | CVE-2026-66987 | HCL AION: Improper Restriction of Excessive Authentication Attempts | 5.3 | |
| Medium | CVE-2026-35102 | HCL AION: Open Redirect | 4.7 | |
| Medium | CVE-2026-35110 | HCL AION: Missing Encryption of Sensitive Data | 5.4 | |
| Medium | CVE-2026-35107 | HCL AION: Open Redirect | 4.7 | |
| Medium | CVE-2026-35104 | HCL AION: Open Redirect | 4.7 | |
| Medium | CVE-2026-35103 | HCL AION: Open Redirect | 4.7 | |
| Medium | CVE-2026-35113 | HCL AION: Exposure of Sensitive Information to an Unauthorized Actor | 4.8 | |
| Medium | CVE-2026-35111 | HCL AION: Exposure of Sensitive Information to an Unauthorized Actor | 4.8 | |
| Medium | CVE-2026-35112 | HCL AION: Exposure of Sensitive Information to an Unauthorized Actor | 4.2 | |
| Low | CVE-2026-35109 | HCL AION: Exposure of Information Through Shell Error Message | 3.7 | |
| Low | CVE-2026-35114 | HCL AION: Exposure of Sensitive Information to an Unauthorized Actor | 3.7 | |
| Low | CVE-2026-5345 | HCL AION: Missing Encryption of Sensitive Data | 3.7 | |
| Low | CVE-2026-21849 | HCL AION: Missing Encryption of Sensitive Data | 3.7 | |
| Low | CVE-2026-66982 | HCL AION: Insufficiently Protected Credentials | 3.3 | |
| Low | CVE-2026-66986 | HCL AION: Insufficient Session Expiration | 3.3 | |
| Low | CVE-2026-21834 | HCL AION: Improper Restriction of Rendered UI Layers or Frames | 3.1 | |
| Low | CVE-2026-66984 | HCL AION: Exposure of Sensitive Information to an Unauthorized Actor | 3.1 |