CVE-2025-55268

Published: Mar 26, 2026Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

HCL Aftermarket DPC is affected by Spamming Vulnerability which can allow the actor to excessive spamming can consume server bandwidth and processing resources which may lead to Denial of Service.

Affected (1)

Products: Hcltech: Aftermarket Cloud

Hcltech

1 product

Aftermarket Cloud

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hcltech Aftermarket Cloud	Version 1.0.0

Related CWEs

CWE-799

Improper Control of Interaction Frequency

The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.

References (1)

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793

Source: psirt@hcl.com

Vendor Advisory

Timeline

No history available yet.