Vulnerability · Published Mar 26, 2026 · Assigned by HCL
CVE-2025-55263HCL Aftermarket DPC is affected by Hardcoded Sensitive Data
High 7.3
In plain English
A high-severity hard-coded credentials in Aftermarket DPC from HCL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.2%top 90.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to the source code or if it is stored in insecure repositories, they can easily retrieve these hardcoded secrets.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL | Aftermarket DPC | version 1.0.0 |
Weakness: CWE-798 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H