๐Ÿ” CVE Alert

CVE-2025-55271

LOW 3.1

HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability

CVSS Score
3.1
EPSS Score
0.0%
EPSS Percentile
0th

HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be able to execute arbitrary commands or inject harmful content into the response..

CWE CWE-113
Vendor hcl
Product aftermarket dpc
Published Mar 26, 2026
Last Updated Mar 26, 2026
Stay Ahead of the Next One

Get instant alerts for hcl aftermarket dpc

Be the first to know when new low vulnerabilities affecting hcl aftermarket dpc are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Affected Versions

HCL / Aftermarket DPC
version 1.0.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
support.hcl-software.com: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793