5.7
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
Description
HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability, allows attacker to upload and execute malicious scripts, gaining full control over the server.
Basic Information
ID
CVE-2025-55267
Source
HCL
Published
Mar 26, 2026 at 13:01
Modified
Mar 26, 2026 at 15:01
Affected Product
Vendor
HCL
Product
Aftermarket DPC
Version
version 1.0.0
Affected Versions
HCL Aftermarket DPC version 1.0.0