Findings

CVE-2025-55261

HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his privileges and may compromise the application and…

Published Mar 26, 2026 · updated Jun 17, 2026 · hcltech aftermarket cloud

HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his privileges and may compromise the application and may steal and manipulate the data.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 26, 2026 · NIST NVD

    Detected

    HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his privileges and may compromise the application and may steal and manipulate the data.

  2. Jun 17, 2026 · NIST NVD

    Updated

    HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his privileges and may compromise the application and may steal and manipulate the data.

Affected

  • cpe hcltech/aftermarket cloud1.0.0

Sources

  • CVE.orgVulnerability recordCVE-2025-55261

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-55261

    HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his privileges and may compromise the application and may steal and manipulate the data.

    nvd.nist.gov

References