aftermarket cloud vulnerabilities and fixes

Recent CVEs affecting aftermarket cloud, with upgrade or downgrade steps. 17 tracked.

Also searched as: aftermarketcloud.

aftermarket cloud has 17 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-03-26. Highest priority: CVE-2025-55261 (score 35/100).

• CVE-2025-55277 LOW 2.6 DOWNGRADE HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability using which an attacker m
• CVE-2025-55276 LOW 3.1 DOWNGRADE HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of t
• CVE-2025-55275 LOW 3.7 DOWNGRADE HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability using which an attacker can exploit
• CVE-2025-55274 LOW 2.6 DOWNGRADE HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability
• CVE-2025-55273 MEDIUM 4.3 DOWNGRADE HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability where an attacker using external
• CVE-2025-55272 LOW 3.1 DOWNGRADE HCL Aftermarket DPC is affected by Banner Disclosure vulnerability where attackers gain insights into the syst
• CVE-2025-55271 LOW 3.1 DOWNGRADE HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web app
• CVE-2025-55270 LOW 3.5 DOWNGRADE HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable cod
• CVE-2025-55269 MEDIUM 4.2 DOWNGRADE HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to
• CVE-2025-55268 MEDIUM 4.3 DOWNGRADE HCL Aftermarket DPC is affected by Spamming Vulnerability which can allow the actor to excessive spamming can
• CVE-2025-55267 MEDIUM 5.7 DOWNGRADE HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability, allows attacker to upload and execu
• CVE-2025-55266 MEDIUM 5.9 DOWNGRADE HCL Aftermarket DPC is affected by Session Fixation which allows attacker to takeover the user's session and u
• CVE-2025-55265 MEDIUM 6.5 DOWNGRADE HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensi
• CVE-2025-55264 MEDIUM 5.5 DOWNGRADE HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change will allow attacker to acc
• CVE-2025-55263 HIGH 7.3 DOWNGRADE HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to the source
• CVE-2025-55262 HIGH 8.3 DOWNGRADE HCL Aftermarket DPC is affected by SQL Injection which allows attacker to exploit this vulnerability to retrie
• CVE-2025-55261 HIGH 8.1 DOWNGRADE HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escala

FAQ

How do I fix aftermarket cloud vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is aftermarket cloud being exploited right now?

None of the tracked aftermarket cloud CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which aftermarket cloud CVE should I patch first?

CVE-2025-55261 currently ranks highest (35/100): HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escala.

RSS feed for aftermarket cloud · ← Back to latest CVEs