CWE-1032
CVEs classified under CWE-1032, newest first.
4 CVEsRSS
CVE-2026-21833Low· 3.7HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured
HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured. CSP helps prevent attacks such as Cross-Site Scripting (XSS) by restricting the sources from which scripts, styles…
▾ SunlitHCL Software · AIONEPSS 0.21%via NVD
CVE-2025-52635Low· 3.7A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0.
A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0.
▾ Sunlithcltech · aionEPSS 0.26%via NVD
CVE-2025-52624Medium· 5.4A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other inject…
A vulnerability Bypass of the script allowlist configuration in HCL AION. An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, increasing the risk of cross-site scripting and other inject…
▾ Sunlithcltech · aionEPSS 0.20%via NVD
CVE-2025-52650High· 8.2Inline script execution allowed in CSP vulnerability has been identified in HCL AION v2.0
Inline script execution allowed in CSP vulnerability has been identified in HCL AION v2.0
▾ Twilighthcltech · aionEPSS 0.23%via NVD