Findings

CVE-2025-55270

HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, C…

Published Mar 26, 2026 · updated Jun 17, 2026 · hcltech aftermarket cloud

HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, Command Injection etc.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 26, 2026 · NIST NVD

    Detected

    HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, Command Injection etc.

  2. Jun 17, 2026 · NIST NVD

    Updated

    HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, Command Injection etc.

Affected

  • cpe hcltech/aftermarket cloud1.0.0

Sources

  • CVE.orgVulnerability recordCVE-2025-55270

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-55270

    HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, Command Injection etc.

    nvd.nist.gov

References

CVE-2025-55270 · ZeroDay Findings