VULNERABILITY INTELLIGENCE

CVE-2025-55274

CVSS score2.6 LOW
EPSS probability0.19%
CISA KEVNot currently listed
Published2026-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability. CORS misconfigurations includes the exposure of sensitive user information to attackers, unauthorized access to APIs, and possible data manipulation or leakage. If an attacker to exploit CORS misconfiguration, they could steal sensitive data, perform actions on behalf of a legitimate user.

Weakness classification

  • psirt@hcl.com: CWE-942

Primary references