CVE-2025-52644: Hcltech Aion

High severity, CVSS 8.2. EPSS: 0.1% chance of exploitation in the next 30 days.

HCL AION is affected by a vulnerability where certain user actions are not adequately audited or logged. The absence of proper auditing mechanisms may reduce traceability of user activities and could potentially impact monitoring, accountability, or incident investigation processes.

Affected products

• Hcltech Aion: from 2.0.0, before 2.1.2 (fixed in 2.1.2)

Published 2026-03-16. Last modified 2026-06-17.