CVE-2025-55265

Published: Mar 26, 2026Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks.

Affected (1)

Products: Hcltech: Aftermarket Cloud

Hcltech

1 product

Aftermarket Cloud

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hcltech Aftermarket Cloud	Version 1.0.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793

Source: psirt@hcl.com

Vendor Advisory

Timeline

No history available yet.