CVE-2025-55269

MEDIUM

HCL Aftermarket DPC is affected by Weak Password Policy vulnerability

Title source: cna
STIX 2.1

Description

HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to guess weak passwords or use brute-force techniques to gain unauthorized access to user accounts.

References (1)

Scores

CVSS v3 4.2
EPSS 0.0002
EPSS Percentile 5.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-521
Status published
Products (2)
HCL/Aftermarket DPC version 1.0.0
hcltech/aftermarket_cloud 1.0.0
Published Mar 26, 2026
Tracked Since Mar 26, 2026