CVE-2025-62310 affects HCL AION 2.1.0 and is classified under CWE-319, which concerns the cleartext transmission of sensitive information. The vulnerability arises because encryption is not enforced for some data transmissions or operations, potentially exposing sensitive information to interception or unauthorized access. The CVSS v3.1 base score is 5.4 (AV:A/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L), reflecting a medium severity with network attack vector requiring high attack complexity and user interaction, and partial impact on confidentiality, integrity, and availability. No patch or official remediation level has been provided by HCL as of the publication date.

The vulnerability may allow an attacker with access to the network path to intercept sensitive information transmitted without encryption. The impact includes limited confidentiality, integrity, and availability loss. Since user interaction is required and attack complexity is high, exploitation is less straightforward. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing additional network-level protections such as VPNs or encrypted tunnels to safeguard sensitive transmissions. Monitor vendor communications for updates on patches or official mitigations.