CVE-2025-55277: low-severity vulnerability in HCL Aftermarket DPC
HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
HCL Aftermarket DPC uses outdated software components that have known security flaws. This allows attackers to use publicly available exploits to compromise the application.
The application includes vulnerable or outdated library/component versions (CWE-1104) that have documented security flaws. An attacker with network access can leverage publicly disclosed exploits against these dependencies to potentially gain unauthorized access or execute arbitrary code, depending on the specific vulnerable component.
In the same product, most dangerous first.