{"id":"CVE-2025-55263","aliases":["EUVD-2025-209083","GHSA-fw8g-7wr3-wr37"],"status":"published","title":"HCL Aftermarket DPC is affected by Hardcoded Sensitive Data","description":"HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to the source code or if it is stored in insecure repositories, they can easily retrieve these hardcoded secrets.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00198,"percentile":0.0963,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2026-03-26T13:05:07Z","modified":"2026-06-17T09:41:32Z","products":[{"vendor":"hcl","product":"aftermarket dpc"},{"vendor":"hcltech","product":"aftermarket_cloud"}],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article\u0026sysparm_article=KB0129793","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55263"},{"url":"https://github.com/advisories/GHSA-fw8g-7wr3-wr37"}],"sources":{"cve":[{"id":"CVE-2025-55263","title":"HCL Aftermarket DPC is affected by Hardcoded Sensitive Data","description":"HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to the source code or if it is stored in insecure repositories, they can easily retrieve these hardcoded secrets.","status":"published","published":"2026-03-26T13:05:07.172Z","modified":"2026-03-26T18:34:31.869Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:32:52.839698Z"}],"euvd":[{"id":"EUVD-2025-209083","description":"HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to the source code or if it is stored in insecure repositories, they can easily retrieve these hardcoded secrets.","status":"published","published":"2026-03-26T13:05:07Z","modified":"2026-03-26T18:34:31Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:25:28.18595Z"}],"ghsa":[{"id":"GHSA-fw8g-7wr3-wr37","title":"HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access...","description":"HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to the source code or if it is stored in insecure repositories, they can easily retrieve these hardcoded secrets.","status":"published","published":"2026-03-26T15:30:40Z","modified":"2026-03-26T15:30:41Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T15:06:52.998793Z"}],"nvd":[{"id":"CVE-2025-55263","description":"HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to the source code or if it is stored in insecure repositories, they can easily retrieve these hardcoded secrets.","status":"published","published":"2026-03-26T14:16:08.007Z","modified":"2026-06-17T09:41:32.693Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:12:01.641503Z"}]}}