BaseFortify

Publication date: 2025-10-10

Last updated on: 2026-04-25

Assigner: HCL Software

Description

A vulnerability Cacheable SSL Page Found vulnerability has been identified in HCL AION. Cached data may expose credentials, system identifiers, or internal file paths to attackers with access to the device or browser This issue affects AION: 2.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-10

Last Modified

2026-04-25

Generated

2026-07-06

AI Q&A

2025-10-10

EPSS Evaluated

2026-07-05

NVD

CVE-2025-52625

Affected Vendors & Products

Vendor	Product	Version / Range
hcltech	aion	2.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-525	The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.

Attack-Flow Graph

Executive Summary

This vulnerability is a Cacheable SSL Page Found issue in HCL AION version 2.0. It means that sensitive data such as credentials, system identifiers, or internal file paths may be cached and accessible to attackers who have access to the device or browser, potentially exposing this information.

Impact Analysis

The vulnerability can lead to exposure of sensitive information like credentials and system identifiers to unauthorized attackers who can access the device or browser, which may result in unauthorized access or information leakage.

Hi! I’m here to help you understand CVE-2025-52625. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70