CVE-2025-62314
HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted without adequate rate limiting or challenge mechanisms, potentially resulting in unintended behavior or security impact under certain conditions.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.6
- CVSS vector
- CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H
- EPSS probability
- 0.10%
- CWE
- CWE-307
- Published
- 2026-08-13
- Last modified
- 2026-08-13
Affected products
- HCL Software AION
Weakness type
Related vulnerabilities
- CVE-2025-64310 — EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attemp
- CVE-2026-32295 — JetKVM insufficient login rate limiting
- CVE-2026-32292 — GL-iNet Comet (GL-RM1) KVM insufficient login rate-limiting
- CVE-2025-46414 — EG4 Electronics EG4 Inverters Improper Restriction of Excessive Authentication Attempts
- CVE-2026-33640 — Outline has a rate limit bypass that allows brute force of email login OTP
- CVE-2026-33419 — MinIO: LDAP login brute-force via user enumeration and missing rate limit
- CVE-2026-33152 — Tandoor Recipes Vulnerable to Unrestricted Brute-Force via BasicAuthentication
- CVE-2026-31904 — CTEK Chargeportal Improper Restriction of Excessive Authentication Attempts