CVE-2025-55265

MEDIUM

6.5

Description

HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks.

Details CVE

Score CVSS v3.16.5

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurREQUIRED

Publie3/26/2026

Derniere modification3/26/2026

Sourcenvd

Observations honeypot0

Produits affectes

hcltech:aftermarket_cloud

Faiblesses (CWE)

CWE-200

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793(psirt@hcl.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.