by Kastro
Paper/Archive/CVE-2025-55251

CVE-2025-55251

HCL Software AION — HCL AION is affected by an Unrestricted File Upload vulnerability

EPSS 0.2%CVSS 9.8
critical.is priorityof 100
32
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 12.0.120 × 202.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

HCL AION is affected by an Unrestricted File Upload vulnerability. This can allow malicious file uploads, potentially resulting in unauthorized code execution or system compromise.

Affected

ProductAffectedFixed inSource
AION2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
HCL (CNA)3.1CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsupport.hcl-software.com/kb_view.do?sys_kb_id=4b92474633de7ad4159a05273e5c7b4b&searchTerm=kb0127995#