VULNERABILITY INTELLIGENCE

CVE-2025-55261

CVSS score8.1 HIGH
EPSS probability0.32%
CISA KEVNot currently listed
Published2026-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Description

HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his privileges and may compromise the application and may steal and manipulate the data.

Weakness classification

  • psirt@hcl.com: CWE-284

Primary references