CVE-2025-52628 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

HCL AION is affected by a Cookie with Insecure, Improper, or Missing SameSite vulnerability. This can allow cookies to be sent in cross-site requests, potentia…
Medium CVSS: 4.6

CVE-2025-52628

HCL AION is affected by a Cookie with Insecure, Improper, or Missing SameSite vulnerability. This can allow cookies to be sent in cross-site requests, potentially increasing exposure to cross-site request forgery and related security risks. This issue affects AION: 2.0.
Vendor
Hcltech
Product
Aion
CWE
CWE-1275
Yayın Tarihi
2026-02-03 19:16:12
Güncelleme
2026-02-11 15:23:31
Source Identifier
psirt@hcl.com
KEV Date Added
-

Kategoriler

Referanslar