CVE-2025-55275

HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability

Low · published March 26, 2026

CVSS v3.1
3.7
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability using which an attacker can exploit concurrent sessions to hijack or impersonate an admin user.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.6th percentile
Published
2026-03-26T12:47Z
EPSS history
Timeline
  • 26 MAR 12:47Z
    HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability
    cvelistv5