CVE-2025-55270: low-severity vulnerability in HCL Aftermarket DPC
HCL Aftermarket DPC is affected by Improper Input Validation
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.5epss 1.0%
In short
HCL Aftermarket DPC doesn't properly check user input, allowing attackers to inject harmful code that could execute commands or steal data through techniques like XSS and SQL Injection.
Technical detail
The application fails to validate and sanitize user-supplied input before processing it, enabling code injection attacks including XSS, SQL Injection, and Command Injection depending on how the input is used in the application context.
Summary generated and translated by AI from the official description.
HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, Command Injection etc.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
Affected products
HCL · Aftermarket DPCRelated CVEs — HCL Aftermarket DPC
In the same product, most dangerous first.
CVE-2025-55265MEDIUMHCL Aftermarket DPC is affected by File DiscoveryEPSS 0.3%CVE-2025-55271LOWHCL Aftermarket DPC is affected by HTTP Response Splitting vulnerabilityEPSS 0.3%CVE-2025-55261HIGHHCL Aftermarket DPC is affected by Missing Functional Level Access ControlEPSS 0.3%CVE-2025-55267MEDIUMHCL Aftermarket DPC is affected by Unrestricted File Upload vulnerabilityEPSS 0.3%CVE-2025-55268MEDIUMHCL Aftermarket DPC is affected by Spamming VulnerabilityEPSS 0.3%CVE-2025-55262HIGHHCL Aftermarket DPC is affected by SQL InjectionEPSS 0.3%