by Kastro
Paper/Archive/CVE-2025-55261

CVE-2025-55261

HCL Aftermarket DPC — HCL Aftermarket DPC is affected by Missing Functional Level Access Control

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
35
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 25.5.255 × 205.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his privileges and may compromise the application and may steal and manipulate the data.

Affected

ProductAffectedFixed inSource
Aftermarket DPCversion 1.0.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
HCL (CNA)8.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsupport.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793