CVE-2025-55249: Hcltech Aion

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL AION is affected by a Missing Security Response Headers vulnerability. The absence of standard security headers may weaken the application’s overall security posture and increase its susceptibility to common web-based attacks.

Affected products

Published 2026-01-19. Last modified 2026-06-17.