CWE-1032 — known CVE vulnerabilities

CVEs classified under CWE-1032, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2025-52650 — CVSS 8.2 (high): Inline script execution allowed in CSP vulnerability has been identified in HCL AION v2.0
• CVE-2026-21833 — CVSS 3.7 (low): HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured. CSP helps…
• CVE-2025-52629 — CVSS 3.7 (low): HCL AION is susceptible to Missing Content-Security-Policy. An The absence of a CSP header may increase the risk of cross-site scripting…
• CVE-2025-52635 — CVSS 3.7 (low): A rusted types in scripts not enforced in CSP vulnerability has been identified in HCL AION.This issue affects AION: 2.0.