VULNERABILITY INTELLIGENCE
CVE-2025-55263
CVSS score7.3 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H
Description
HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to the source code or if it is stored in insecure repositories, they can easily retrieve these hardcoded secrets.
Weakness classification
- CWE-798: Use of Hard-coded Credentials
Primary references
- psirt@hcl.com — Vendor Advisory