HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability. CORS misconfigurations includes the exposure of sensitive user information to attackers, unauthorized access to APIs, and possible data manipulation or leakage. If an attacker to exploit CORS misconfiguration, they could steal sensitive data, perform actions on behalf of a legitimate user.
References
| Link | Resource |
|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793 | Vendor Advisory |
Configurations
History
26 Mar 2026, 20:19
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:hcltech:aftermarket_cloud:1.0.0:*:*:*:*:*:*:* | |
| References | () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793 - Vendor Advisory | |
| First Time |
Hcltech
Hcltech aftermarket Cloud |
26 Mar 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-26 13:16
Updated : 2026-03-26 20:19
NVD link : CVE-2025-55274
Mitre link : CVE-2025-55274
CVE.ORG link : CVE-2025-55274
JSON object : View
Products Affected
hcltech
- aftermarket_cloud
CWE
CWE-942
Permissive Cross-domain Policy with Untrusted Domains