CVE-2025-55274CWE-942

HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability

Low · published March 26, 2026

CVSS v3.1
2.6
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability. CORS misconfigurations includes the exposure of sensitive user information to attackers, unauthorized access to APIs, and possible data manipulation or leakage. If an attacker to exploit CORS misconfiguration, they could steal sensitive data, perform actions on behalf of a legitimate user.

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-942 · Permissive Cross-domain Security Policy with Untrusted Domains
Published
2026-03-26T12:47Z
EPSS history
Timeline
  • 26 MAR 12:47Z
    HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability
    cvelistv5