PT-2026-28296 · Hcl · Hcl Aftermarket Dpc

Published 2026-03-26 · Updated 2026-03-29 · CVE-2025-55271

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HCL Aftermarket DPC (affected versions not specified)

Description HCL Aftermarket DPC is susceptible to an HTTP Response Splitting issue. The impact of this issue depends on how the web application processes split responses, potentially allowing an attacker to execute arbitrary commands or inject malicious content into the response.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-113

Related Identifiers

CVE-2025-55271

Affected Products

Hcl Aftermarket Dpc

References · 3

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55271 · Security Note
• https://twitter.com/CVEnew/status/2038135224245325933 · Twitter Post