CVE-2025-55266

Description

HCL Aftermarket DPC is affected by Session Fixation which allows attacker to takeover the user's session and use it carry out unauthorized transaction behalf of the user.

PUBLISHED Reserved 2025-08-12 | Published 2026-03-26 | Updated 2026-03-26 | Assigner HCL

Problem types

CWE-384: Session Fixation

Product status

References

support.hcl-software.com/...rticle&sysparm_article=KB0129793

cve.org (CVE-2025-55266)

nvd.nist.gov (CVE-2025-55266)

Download JSON