1. Home
  2. CVE Database
  3. CVE-2025-52642
LOW · 3.3

CVE-2025-52642

HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour. Exposure of internal paths may reveal environment structure de...

Vulnerability Description

HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour. Exposure of internal paths may reveal environment structure details which could potentially aid in further targeted attacks or information disclosure.

CVSS Score

3.3

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
HcltechAion>= 2.0.0, < 2.1.2

Related Weaknesses (CWE)

CWE-538

References

FAQ

What is CVE-2025-52642?

CVE-2025-52642 is a vulnerability with a CVSS score of 3.3 (LOW). HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour. Exposure of internal paths may reveal environment structure de...

How severe is CVE-2025-52642?

CVE-2025-52642 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-52642?

Check the references section above for vendor advisories and patch information. Affected products include: Hcltech Aion.