CVE-2025-55266CWE-384

HCL Aftermarket DPC is affected by Session Fixation

Medium · published March 26, 2026

CVSS v3.1
5.9
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

HCL Aftermarket DPC is affected by Session Fixation which allows attacker to takeover the user's session and use it carry out unauthorized transaction behalf of the user.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.5th percentile
Weakness
CWE-384 · Session Fixation
Published
2026-03-26T13:02Z
EPSS history
Timeline
  • 26 MAR 13:02Z
    HCL Aftermarket DPC is affected by Session Fixation
    cvelistv5