VULNERABILITY INTELLIGENCE

CVE-2025-55270

CVSS score3.5 LOW
EPSS probability1.04%
CISA KEVNot currently listed
Published2026-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, Command Injection etc.

Weakness classification

  • psirt@hcl.com: CWE-20

Primary references