CWE-1032 — known CVE vulnerabilities

CVEs classified under CWE-1032, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-52650 — CVSS 8.2 (high): Inline script execution allowed in CSP vulnerability has been identified in HCL AION v2.0
• CVE-2025-52629 — CVSS 3.7 (low): HCL AION is susceptible to Missing Content-Security-Policy. An The absence of a CSP header may increase the risk of cross-site scripting…
• CVE-2025-52635 — CVSS 3.7 (low): A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0.