CVE-2025-55268: medium-severity vulnerability in HCL Aftermarket DPC
HCL Aftermarket DPC is affected by Spamming Vulnerability
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.3epss 0.3%
In short
HCL Aftermarket DPC allows attackers to send excessive spam messages that can overload the server, causing it to become slow or unavailable for legitimate users.
Technical detail
The application lacks rate limiting or input validation controls (CWE-799), allowing unauthenticated or low-privileged actors to flood the server with requests, exhausting bandwidth and CPU resources and triggering a denial-of-service condition.
Summary generated and translated by AI from the official description.
HCL Aftermarket DPC is affected by Spamming Vulnerability which can allow the actor to excessive spamming can consume server bandwidth and processing resources which may lead to Denial of Service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
HCL · Aftermarket DPCRelated CVEs — HCL Aftermarket DPC
In the same product, most dangerous first.
CVE-2025-55270LOWHCL Aftermarket DPC is affected by Improper Input ValidationEPSS 1.0%CVE-2025-55265MEDIUMHCL Aftermarket DPC is affected by File DiscoveryEPSS 0.3%CVE-2025-55271LOWHCL Aftermarket DPC is affected by HTTP Response Splitting vulnerabilityEPSS 0.3%CVE-2025-55261HIGHHCL Aftermarket DPC is affected by Missing Functional Level Access ControlEPSS 0.3%CVE-2025-55267MEDIUMHCL Aftermarket DPC is affected by Unrestricted File Upload vulnerabilityEPSS 0.3%CVE-2025-55262HIGHHCL Aftermarket DPC is affected by SQL InjectionEPSS 0.3%