What is the CVSS score of CVE-2025-52648?

CVE-2025-52648 has a CVSS 3.1 base score of 4.8 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of Jwt Attack are affected by CVE-2025-52648?

Organizations using HCL AION should be aware of moderate risk from CVE-2025-52648, a signature bypass vulnerability rated CVSS 4.8. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-52648?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Jwt Attack CVE-2025-52648

EUVD-2025-208723 MEDIUM

Improper Verification of Cryptographic Signature (CWE-347)

2026-03-16 HCL

Information Disclosure Jwt Attack

4.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 14:00 euvd

EUVD-2025-208723

Analysis Generated

Mar 16, 2026 - 14:00 vuln.today

CVE Published

Mar 16, 2026 - 12:53 nvd

MEDIUM 4.8

DescriptionNVD

HCL AION is affected by a vulnerability where offering images are not digitally signed. Lack of image signing may allow the use of unverified or tampered images, potentially leading to security risks such as integrity compromise or unintended behavior in the system

AnalysisAI

A security vulnerability in HCL AION (CVSS 4.8). Remediation should follow standard vulnerability management procedures.

Technical ContextAI

CWE-347 (Signature Bypass). Affects HCL AION.

RemediationAI

Monitor vendor channels for patch availability.

CVE-2025-52648 vulnerability details – vuln.today

Back