CVE-2025-52629 — HCL AION is susceptible to Missing Content-Security-Policy
HCL AION is susceptible to Missing Content-Security-Policy. An The absence of a CSP header may increase the risk of cross-site scripting and other content injection attacks by…
Published: 2026-02-03 · CVSS: 3.7 · CVSS 3.1
HCL AION is susceptible to Missing Content-Security-Policy. An The absence of a CSP header may increase the risk of cross-site scripting and other content injection attacks by allowing unsafe scripts or resources to execute..This issue affects AION: 2.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7