CVE-2025-55273 — HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability

CVE-2025-55273

HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability PUBLISHED

Description (CNA)

HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability where an attacker using external scripts can tamper with the DOM, altering the content or behavior of the application. Malicious scripts can steal cookies or session tokens, leading to session hijacking.

Affected (CNA)

Vendor / product	Versions
HCL / Aftermarket DPC	affected version 1.0.0

CWE

CWE-829

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.