CVE-2025-52637
Awaiting Analysis Awaiting Analysis - Queue
SQL Injection Vulnerability in HCL AION Offering Configurations

Publication date: 2026-03-16

Last updated on: 2026-03-27

Assigner: HCL Software

Description
HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries. Improper validation or restrictions on query execution could expose the system to unintended database interactions or limited information exposure under specific conditions.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-16
Last Modified
2026-03-27
Generated
2026-06-16
AI Q&A
2026-03-16
EPSS Evaluated
2026-06-15
NVD
CVE-2025-52637
EUVD
EUVD-2025-208720
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
hcl aion From 2.0 (inc) to 2.1.2 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Executive Summary

The vulnerability in HCL AION involves certain offering configurations that may allow the execution of potentially harmful SQL queries. This happens because of improper validation or insufficient restrictions on query execution, which could lead to unintended interactions with the database or limited exposure of information under specific conditions.

Impact Analysis

This vulnerability can impact you by exposing the system to unintended database interactions, which may result in limited information exposure. Such exposure could compromise data integrity, confidentiality, or availability depending on the nature of the executed SQL queries and the specific conditions under which they occur.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-52637. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart