CWE-1032
01
vulnerabilities (8)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-52635US | critical9.8 | — | ||
A
rusted types in scripts not enforced in CSP vulnerability has been identified
in HCL AION.This issue affects AION: 2.0. | ||||
| CVE-2005-0290US | high7.5 | — | ||
NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using hex encoded URLs, as demonstrated using a hex encoded file ext… | ||||
| CVE-2006-6961US | medium6.8 | — | ||
WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which allows remote attackers to bypass malware detection by changing a file's name. | ||||
| CVE-2025-52629US | medium6.1 | — | ||
HCL AION is susceptible to Missing Content-Security-Policy.
An The absence of a CSP header may increase the risk of cross-site scripting and other content injection attacks by al… | ||||
| CVE-2025-52624US | medium6.1 | — | ||
A vulnerability Bypass of the script allowlist configuration in HCL AION.
An incorrectly configured Content-Security-Policy header may allow unauthorized scripts to execute, inc… | ||||
| CVE-2025-52650US | medium6.1 | — | ||
Inline script execution allowed in CSP vulnerability has been identified in HCL AION v2.0 | ||||
| CVE-2005-4526US | medium5.0 | — | ||
Clearswift MIMEsweeper For Web (a.k.a. WEBsweeper) 4.0 through 5.1 allows remote attackers to bypass filtering via a URL that does not include a .exe extension but returns an execu… | ||||
| CVE-2026-21833US | — | — | ||
HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured. CSP helps prevent attacks such as Cross-Site Scripting (X… | ||||
02
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan