← Back to CVE search

CVE-2025-55266

HCL Aftermarket DPC

Description

HCL Aftermarket DPC is affected by Session Fixation which allows attacker to takeover the user-s session and use it carry out unauthorized transaction behalf of the user.

CVSS 5.9EPSS 0.251%Risk 0.6
View source
Published
2026-03-26 13:16:25
Affected versions
unknown
Type
Installed app
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L