1. Home
  2. CVE Database
  3. CVE-2025-52636
LOW · 1.8

CVE-2025-52636

HCL AION is affected by a vulnerability related to the handling of upload size limits. Improper control or validation of upload sizes may allow excessive resource consumption, which could potentially ...

Vulnerability Description

HCL AION is affected by a vulnerability related to the handling of upload size limits. Improper control or validation of upload sizes may allow excessive resource consumption, which could potentially lead to service degradation or denial-of-service conditions under certain scenarios.

CVSS Score

1.8

LOW

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:L
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
HcltechAion>= 2.0.0, < 2.1.2

Related Weaknesses (CWE)

CWE-400

References

FAQ

What is CVE-2025-52636?

CVE-2025-52636 is a vulnerability with a CVSS score of 1.8 (LOW). HCL AION is affected by a vulnerability related to the handling of upload size limits. Improper control or validation of upload sizes may allow excessive resource consumption, which could potentially ...

How severe is CVE-2025-52636?

CVE-2025-52636 has been rated LOW with a CVSS base score of 1.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-52636?

Check the references section above for vendor advisories and patch information. Affected products include: Hcltech Aion.