← Back

CVE-2025-55273

nvd nist
Published: Mar 26, 2026Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability where an attacker using external scripts can tamper with the DOM, altering the content or behavior of the application. Malicious scripts can steal cookies or session tokens, leading to session hijacking.

Affected (1)

Hcltech
1 product
Aftermarket Cloud
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Aftermarket Cloud
Version 1.0.0

Related CWEs

CWE-829
Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.