Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2025-55272— HCL Aftermarket DPC is affected by Banner Disclosure vulnerability

CVSS 3.1 · Low EPSS 0.01% · P1
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2025-55272

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
HCL Aftermarket DPC is affected by Banner Disclosure vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
HCL Aftermarket DPC is affected by Banner Disclosure vulnerability where attackers gain insights into the system’s software and version details which would allow them to craft software specific attacks.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
信息暴露
Source: NVD (National Vulnerability Database)
Vulnerability Title
HCL Aftermarket DPC 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HCL Aftermarket DPC是印度HCL公司的一个数字化备件与售后服务管理平台。 HCL Aftermarket DPC存在安全漏洞，该漏洞源于横幅披露，可能导致攻击者获取系统软件和版本详情，从而实施针对特定软件的攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
HCLAftermarket DPC version 1.0.0 -

II. Public POCs for CVE-2025-55272

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-55272

Please Login to view more intelligence information

Same Patch Batch · HCL · 2026-03-26 · 17 CVEs total

CVE-2025-552628.3 HIGHHCL Aftermarket DPC is affected by SQL Injection
CVE-2025-552618.1 HIGHHCL Aftermarket DPC is affected by Missing Functional Level Access Control
CVE-2025-552637.3 HIGHHCL Aftermarket DPC is affected by Hardcoded Sensitive Data
CVE-2025-552656.5 MEDIUMHCL Aftermarket DPC is affected by File Discovery
CVE-2025-552665.9 MEDIUMHCL Aftermarket DPC is affected by Session Fixation
CVE-2025-552675.7 MEDIUMHCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability
CVE-2025-552645.5 MEDIUMHCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change
CVE-2025-552734.3 MEDIUMHCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability
CVE-2025-552684.3 MEDIUMHCL Aftermarket DPC is affected by Spamming Vulnerability
CVE-2025-552694.2 MEDIUMHCL Aftermarket DPC is affected by Weak Password Policy vulnerability
CVE-2025-552753.7 LOWHCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability
CVE-2025-552703.5 LOWHCL Aftermarket DPC is affected by Improper Input Validation
CVE-2025-552763.1 LOWHCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability
CVE-2025-552713.1 LOWHCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability
CVE-2025-552742.6 LOWHCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability
CVE-2025-552772.6 LOWHCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability

IV. Related Vulnerabilities

Same product: Aftermarket DPC
Same vendor: HCL
Same weakness: CWE-200

V. Comments for CVE-2025-55272

No comments yet

Leave a comment