CVE-2025-55271
HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability
- State
- Published
- Severity
- 3.1 Low
- Published
- Mar 26, 2026
- Updated
- Mar 26, 2026
- Reserved
- Aug 12, 2025
Description
HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be able to execute arbitrary commands or inject harmful content into the response..
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.1 Low | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N | HCL |
Weaknesses
- CWE-113 Improper Control of HTTP Messages and Headers
Affected Products
| Product | Versions |
|---|---|
Aftermarket DPCHCL |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.