Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-55273 EUVD-2025-209069

HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability

Published Mar 26, 2026 · Updated Mar 26, 2026 · Assigned by HCL

Description

HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability where an attacker using external scripts can tamper with the DOM, altering the content or behavior of the application. Malicious scripts can steal cookies or session tokens, leading to session hijacking.

Affected products

VendorProductAffectedFixed
HCL Aftermarket DPC version 1.0.0 —

References