CVE-2025-55271 PUBLISHED

HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability

Assigner: HCL
Reserved: 12.08.2025 Published: 26.03.2026 Updated: 26.03.2026

HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be able to execute arbitrary commands or inject harmful content into the response..

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS Score: 3.1

Product Status

Vendor HCL
Product Aftermarket DPC
Versions Default: unaffected
  • Version version 1.0.0 is affected

References

Problem Types

  • CWE-113: Improper Control of HTTP Messages and Headers CWE