HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability

HCL Aftermarket DPC has a vulnerability where attackers can insert malicious content into HTTP responses by manipulating how the application handles data. This could allow them to inject harmful code or commands that users' browsers might execute.

HTTP Response Splitting vulnerability in HCL Aftermarket DPC allows attackers to inject arbitrary content into HTTP response headers or body by exploiting improper input validation. An attacker can craft malicious requests to split the response stream, potentially leading to arbitrary command execution or content injection depending on application-specific response handling. The attack vector is network-based with low attack complexity (CVSS 3.1 LOW).