Medium severity4.6NVD Advisory· Published Feb 3, 2026· Updated Jun 17, 2026
CVE-2025-52628
CVE-2025-52628
Description
HCL AION is affected by a Cookie with Insecure, Improper, or Missing SameSite vulnerability. This can allow cookies to be sent in cross-site requests, potentially increasing exposure to cross-site request forgery and related security risks. This issue affects AION: 2.0.
Affected products
2- Range: =2.0
Patches
Vulnerability mechanics
References
1- support.hcl-software.com/csmnvdVendor Advisory
News mentions
0No linked articles in our index yet.