CVE-2025-55261

Published: Mar 26, 2026Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his privileges and may compromise the application and may steal and manipulate the data.

Affected (1)

Products: Hcltech: Aftermarket Cloud

Hcltech

1 product

Aftermarket Cloud

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hcltech Aftermarket Cloud	Version 1.0.0

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793

Source: psirt@hcl.com

Vendor Advisory

Timeline

No history available yet.