CVE-2025-55262highCWE-798

CVE-2025-55262: high-severity vulnerability in HCL Aftermarket DPC

HCL Aftermarket DPC is affected by SQL Injection

Published

Follow this CVE+ Monitor Aftermarket DPC

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.3epss 0.3%
In short

HCL Aftermarket DPC contains a SQL Injection flaw that lets attackers run unauthorized database commands to steal sensitive data. This happens when user input isn't properly filtered before being used in database queries.

Technical detail

SQL Injection vulnerability in HCL Aftermarket DPC allows unauthenticated or low-privileged attackers to inject malicious SQL statements into input parameters, bypassing input validation. This enables unauthorized database access, data extraction, and potential privilege escalation or system compromise depending on database permissions.

Summary generated and translated by AI from the official description.
HCL Aftermarket DPC is affected by SQL Injection which allows attacker to exploit this vulnerability to retrieve sensitive information from the database.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H
Affected products
HCL · Aftermarket DPC
Related CVEs — HCL Aftermarket DPC

In the same product, most dangerous first.

CVE-2025-55270LOWHCL Aftermarket DPC is affected by Improper Input ValidationEPSS 1.0%CVE-2025-55265MEDIUMHCL Aftermarket DPC is affected by File DiscoveryEPSS 0.3%CVE-2025-55271LOWHCL Aftermarket DPC is affected by HTTP Response Splitting vulnerabilityEPSS 0.3%CVE-2025-55261HIGHHCL Aftermarket DPC is affected by Missing Functional Level Access ControlEPSS 0.3%CVE-2025-55267MEDIUMHCL Aftermarket DPC is affected by Unrestricted File Upload vulnerabilityEPSS 0.3%CVE-2025-55268MEDIUMHCL Aftermarket DPC is affected by Spamming VulnerabilityEPSS 0.3%