CVE-2025-62314
MediumCVSS 5.6Summary
HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted without adequate rate limiting or challenge mechanisms, potentially resulting in unintended behavior or security impact under certain conditions.
Risk Assessment
Automated attacks may overwhelm the system or exploit the lack of restrictions for unauthorized actions.
Recommendation
Update HCL AION to the latest version that includes a fix for this vulnerability.
Original NVD description (English source)
HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls. Automated or scripted requests may be submitted without adequate rate limiting or challenge mechanisms, potentially resulting in unintended behavior or security impact under certain conditions.