CVE-2025-55271

LOW

HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability

Title source: cna
STIX 2.1

Description

HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be able to execute arbitrary commands or inject harmful content into the response..

Scores

CVSS v3 3.1
EPSS 0.0002
EPSS Percentile 6.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-113
Status published
Products (2)
HCL/Aftermarket DPC version 1.0.0
hcltech/aftermarket_cloud 1.0.0
Published Mar 26, 2026
Tracked Since Mar 26, 2026