CVE-2025-52628
Published: 03 February 2026
Summary
CVE-2025-52628 is a medium-severity Sensitive Cookie with Improper SameSite Attribute (CWE-1275) vulnerability in Hcltech Aion. Its CVSS base score is 4.6 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 16.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
Threat & Defense at a Glance
Threat & Defense Details
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Missing SameSite cookie attribute directly enables cross-site request forgery against the public-facing HCL AION web application, matching the definition of T1190.
NVD Description
HCL AION is affected by a Cookie with Insecure, Improper, or Missing SameSite vulnerability. This can allow cookies to be sent in cross-site requests, potentially increasing exposure to cross-site request forgery and related security risks. This issue affects AION: 2.0.
Deeper analysisAI
CVE-2025-52628, published on 2026-02-03, is a Cookie with Insecure, Improper, or Missing SameSite vulnerability (CWE-1275) affecting HCL AION version 2.0. This flaw allows cookies to be sent in cross-site requests, potentially increasing exposure to cross-site request forgery (CSRF) and related security risks. The vulnerability has a CVSS v3.1 base score of 4.6 (AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L), indicating medium severity with network accessibility, low attack complexity, and requirements for low privileges and user interaction.
Exploitation requires an attacker to have low privileges (PR:L) and relies on user interaction (UI:R), such as tricking an authenticated victim into initiating a cross-site request from a malicious site. Successful attacks can achieve low impacts on integrity (I:L) and availability (A:L), with no confidentiality impact (C:N), enabling scenarios like unauthorized actions performed on the victim's behalf due to improper cookie handling.
HCL provides mitigation guidance in its support knowledge base article at https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127972.
Details
- CWE(s)