Description
HCL Aftermarket DPC is affected by SQL Injection which allows attacker to exploit this vulnerability to retrieve sensitive information from the database.
References (1)
Core 1
Scores
CVSS v3
8.3
EPSS
0.0027
EPSS Percentile
18.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-798
CWE-89
Status
published
Products (2)
HCL/Aftermarket DPC
version 1.0.0
hcltech/aftermarket_cloud
1.0.0
Published
Mar 26, 2026
Tracked Since
Mar 26, 2026