CVE-2025-55261CWE-284

HCL Aftermarket DPC is affected by Missing Functional Level Access Control

High · published March 26, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his privileges and may compromise the application and may steal and manipulate the data.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00319 · 23.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-03-26T13:10Z
EPSS history
Timeline
  • 26 MAR 13:10Z
    HCL Aftermarket DPC is affected by Missing Functional Level Access Control
    cvelistv5