What is CVE-2025-62308?

CVE-2025-62308 is a medium-severity vulnerability in Hcl Aion, classified under Insertion of Sensitive Information into Sent Data. CVSS score: 5.1/10. Published 2026-05-14.

How severe is CVE-2025-62308?

Medium severity. CVSS v3 base score is 5.1 out of 10.

Vulnerability in Hcl Aion

CVE-2025-62308

HCL AION is affected by a vulnerability where sensitive backend infrastructure details may be exposed. Exposure of such information could reveal internal system architecture or configuration details, which may potentially assist in further analysis or targeted actions under certain conditions

EPSS: 0.001 (1.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.1 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L.

Affected products

Hcl Aion — versions 2.1.0

Weakness classification (CWE)

CWE-201 — Insertion of Sensitive Information into Sent Data

References

psirt@hcl.com

Frequently asked questions

What is CVE-2025-62308?: CVE-2025-62308 is a medium-severity vulnerability in Hcl Aion, classified under Insertion of Sensitive Information into Sent Data. CVSS score: 5.1/10. Published 2026-05-14.
How severe is CVE-2025-62308?: Medium severity. CVSS v3 base score is 5.1 out of 10.