CWE-1032 · 5 records
OWASP Top Ten 2017 Category A6 - Security Misconfiguration
CVEs in this class
5 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2025-52635No exploit | HCL AION is susceptible to Trusted types in scripts not enforced in CSPhcltech · aion · CWE-1032 | Critical9.8 | — | 0.2% | Oct 10, 2025 |
24Monitor | CVE-2025-52650No exploit | HCL AION is susceptible to Inline script execution allowed in CSP vulnerabilityhcltech · aion · CWE-1032 | Medium6.1 | — | 0.2% | Oct 10, 2025 |
24Monitor | CVE-2025-52624No exploit | HCL AION is susceptible to Bypass of the script allow list configuration vulnerabilityhcltech · aion · CWE-1032 | Medium6.1 | — | 0.2% | Oct 10, 2025 |
24Monitor | CVE-2025-52629No exploit | HCL AION is susceptible to Missing Content-Security-Policyhcltech · aion · CWE-1032 | Medium6.1 | — | 0.1% | Feb 3, 2026 |
14Monitor | CVE-2026-21833No exploit | HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833)hcl software · aion · CWE-1032 | Low3.7 | — | 0.2% | Oct 1, 2026 |
- CVE-2025-5263539Monitor
HCL AION is susceptible to Trusted types in scripts not enforced in CSP
CriticalCVSS 9.8No exploitEPSS 0%hcltech · aionOct 10, 2025
- CVE-2025-5265024Monitor
HCL AION is susceptible to Inline script execution allowed in CSP vulnerability
MediumCVSS 6.1No exploitEPSS 0%hcltech · aionOct 10, 2025
- CVE-2025-5262424Monitor
HCL AION is susceptible to Bypass of the script allow list configuration vulnerability
MediumCVSS 6.1No exploitEPSS 0%hcltech · aionOct 10, 2025
- CVE-2025-5262924Monitor
HCL AION is susceptible to Missing Content-Security-Policy
MediumCVSS 6.1No exploitEPSS 0%hcltech · aionFeb 3, 2026
- CVE-2026-2183314Monitor
HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833)
LowCVSS 3.7No exploitEPSS 0%hcl software · aionOct 1, 2026