Lucene search
+L

4361 matches found

Vulnrichment
Vulnrichment
•added 2026/03/26 1:00 p.m.•6 views

CVE-2025-55268 HCL Aftermarket DPC is affected by Spamming Vulnerability

HCL Aftermarket DPC is affected by Spamming Vulnerability which can allow the actor to excessive spamming can consume server bandwidth and processing resources which may lead to Denial of Service...

4.3CVSS5.9AI score0.0027EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/26 1:00 p.m.•43 views

CVE-2025-55268 HCL Aftermarket DPC is affected by Spamming Vulnerability

HCL Aftermarket DPC is affected by Spamming Vulnerability which can allow the actor to excessive spamming can consume server bandwidth and processing resources which may lead to Denial of Service...

4.3CVSS0.0027EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/26 1:00 p.m.•44 views

CVE-2025-55269 HCL Aftermarket DPC is affected by Weak Password Policy vulnerability

HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to guess weak passwords or use brute-force techniques to gain unauthorized access to user accounts...

4.2CVSS0.00242EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/26 1:00 p.m.•57 views

CVE-2025-55269

CVE-2025-55269 concerns HCL Aftermarket DPC, a digital spare parts/aftermarket management platform. The described vulnerability is a weak password policy that can enable attackers to guess weak passwords or perform brute-force attempts to gain unauthorized access to user accounts. The available d...

9.8CVSS5.9AI score0.00242EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/03/26 1:00 p.m.•10 views

CVE-2025-55269

HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to guess weak passwords or use brute-force techniques to gain unauthorized access to user accounts...

4.2CVSS5.8AI score0.00242EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/03/26 12:59 p.m.•10 views

CVE-2025-55270

HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, Command Injection etc...

3.5CVSS6AI score0.00997EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/03/26 12:59 p.m.•44 views

CVE-2025-55270 HCL Aftermarket DPC is affected by Improper Input Validation

HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, Command Injection etc...

3.5CVSS0.00997EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/26 12:59 p.m.•34 views

CVE-2025-55270

CVE-2025-55270 affects HCL Aftermarket DPC. Connected sources confirm an input validation error that can be exploited to inject executable code, enabling XSS, SQL injection, and command injection, among other attacks. Root cause: improper input validation in the affected component/file. Documente...

9.8CVSS5.8AI score0.00997EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/26 12:59 p.m.•7 views

CVE-2025-55270 HCL Aftermarket DPC is affected by Improper Input Validation

HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, Command Injection etc...

3.5CVSS5.8AI score0.00997EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/26 12:59 p.m.•4 views

CVE-2025-55271 HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability

HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be able to execute arbitrary commands or inject harmful content into the response...

3.1CVSS6.5AI score0.00318EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/26 12:59 p.m.•47 views

CVE-2025-55271

CVE-2025-55271 affects HCL Aftermarket DPC via HTTP Response Splitting vulnerability. The available connected documents describe that an attacker may be able to execute arbitrary commands or inject harmful content depending on how the web application handles split responses. The PT-2026-28296 ent...

8.8CVSS6.5AI score0.00318EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/03/26 12:59 p.m.•13 views

CVE-2025-55271

HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be able to execute arbitrary commands or inject harmful content into the response...

3.1CVSS6.1AI score0.00318EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/03/26 12:55 p.m.•40 views

CVE-2025-55272 HCL Aftermarket DPC is affected by Banner Disclosure vulnerability

HCL Aftermarket DPC is affected by Banner Disclosure vulnerability where attackers gain insights into the system’s software and version details which would allow them to craft software specific attacks...

3.1CVSS0.00225EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/26 12:55 p.m.•6 views

CVE-2025-55272 HCL Aftermarket DPC is affected by Banner Disclosure vulnerability

HCL Aftermarket DPC is affected by Banner Disclosure vulnerability where attackers gain insights into the system’s software and version details which would allow them to craft software specific attacks...

3.1CVSS5.9AI score0.00225EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/26 12:55 p.m.•36 views

CVE-2025-55272

Technical details about CVE-2025-55272 are not publicly available in the provided documents. Monitor for updates from official sources; current entries describe a banner disclosure but do not specify affected components, versions, impact, or fixes.

5.3CVSS5.9AI score0.00225EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/03/26 12:55 p.m.•19 views

CVE-2025-55272

HCL Aftermarket DPC is affected by Banner Disclosure vulnerability where attackers gain insights into the system’s software and version details which would allow them to craft software specific attacks...

3.1CVSS5.8AI score0.00225EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/03/26 12:52 p.m.•43 views

CVE-2025-55273 HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability

HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability where an attacker using external scripts can tamper with the DOM, altering the content or behavior of the application. Malicious scripts can steal cookies or session tokens, leading to session hijacking...

4.3CVSS0.00231EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/26 12:47 p.m.•8 views

CVE-2025-55274 HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability

HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability. CORS misconfigurations includes the exposure of sensitive user information to attackers, unauthorized access to APIs, and possible data manipulation or leakage. If an attacker to exploit CORS misconfiguration, they...

2.6CVSS5.7AI score0.0018EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/26 12:47 p.m.•83 views

CVE-2025-55274

HCL Aftermarket DPC is affected by a Cross‑Origin Resource Sharing (CORS) misconfiguration vulnerability reported across multiple sources (CVE-2025-55274). The described issue can lead to exposure of sensitive user data, unauthorized access to APIs, and potential data manipulation or leakage. The...

4.3CVSS5.7AI score0.0018EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/03/26 12:47 p.m.•54 views

CVE-2025-55274 HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability

HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability. CORS misconfigurations includes the exposure of sensitive user information to attackers, unauthorized access to APIs, and possible data manipulation or leakage. If an attacker to exploit CORS misconfiguration, they...

2.6CVSS0.0018EPSS
SaveExploits0References1
Rows per page
Query Builder