CVE-2025-55271
LOWHCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability
Title source: cnaDescription
HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be able to execute arbitrary commands or inject harmful content into the response..
Scores
CVSS v3
3.1
EPSS
0.0002
EPSS Percentile
6.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-113
Status
published
Products (2)
HCL/Aftermarket DPC
version 1.0.0
hcltech/aftermarket_cloud
1.0.0
Published
Mar 26, 2026
Tracked Since
Mar 26, 2026