PT-2026-28287 · Hcl · Hcl Aftermarket Dpc

Published 2026-03-26 · Updated 2026-03-29 · CVE-2025-55262

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions HCL Aftermarket DPC (affected versions not specified)

Description HCL Aftermarket DPC is susceptible to SQL Injection, potentially enabling an attacker to retrieve sensitive information from the database. The vulnerability allows an attacker to exploit this issue to access confidential data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

SQL injection

Weakness Enumeration

CWE-798

CWE-89

Related Identifiers

CVE-2025-55262

Affected Products

Hcl Aftermarket Dpc

References · 4

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55262 · Security Note
• https://twitter.com/CVEnew/status/2038135212778140011 · Twitter Post
• https://twitter.com/TheHackerWire/status/2037307646135722447 · Twitter Post