low3.5
CVE-2025-55249
HCL AION is affected by a Missing Security Response Headers vulnerability.
Impact
HCL AION is affected by a Missing Security Response Headers vulnerability. The absence of standard security headers may weaken the application’s overall security posture and increase its susceptibility to common web-based attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Aion | Version 2.0.0 |