Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-55273

HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability where an attacker using external scripts can tamper with the DOM, altering the content or behavior of the application. Malicious scripts can steal cookies or session tokens, leading to session hijacking.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Aftermarket DPC

Default version status: unaffected

  • version 1.0.0affected

References