CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.7. See the original NVD description below for full technical details.
CVE
CVE-2025-52631
Severity
LOW
CVSS
3.7
EPSS
0.20%
Original NVD Description
HCL AION is affected by a Missing or Insecure HTTP Strict-Transport-Security (HSTS) Header vulnerability. This can allow insecure connections, potentially exposing the application to man-in-the-middle and protocol downgrade attacks.. This issue affects AION: 2.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)