← back
CVE-2025-55274lowCWE-942

HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.6epss 0.2%
exploitation probability
0.2%top 92% of all CVEs
observed exploitation
nono source reports it
HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability. CORS misconfigurations includes the exposure of sensitive user information to attackers, unauthorized access to APIs, and possible data manipulation or leakage. If an attacker to exploit CORS misconfiguration, they could steal sensitive data, perform actions on behalf of a legitimate user.
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
Affected products
HCL · Aftermarket DPC