{"id":"CVE-2025-55265","aliases":["EUVD-2025-209053","GHSA-pw9r-4x84-7pxx"],"status":"published","title":"HCL Aftermarket DPC is affected by File Discovery","description":"HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00332,"percentile":0.26605,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2026-03-26T13:02:42Z","modified":"2026-06-17T09:41:32Z","products":[{"vendor":"hcl","product":"aftermarket dpc"},{"vendor":"hcltech","product":"aftermarket_cloud"}],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article\u0026sysparm_article=KB0129793","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55265"},{"url":"https://github.com/advisories/GHSA-pw9r-4x84-7pxx"}],"sources":{"cve":[{"id":"CVE-2025-55265","title":"HCL Aftermarket DPC is affected by File Discovery","description":"HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks.","status":"published","published":"2026-03-26T13:02:42.078Z","modified":"2026-03-26T15:00:52.875Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:32:52.839698Z"}],"euvd":[{"id":"EUVD-2025-209053","description":"HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks.","status":"published","published":"2026-03-26T13:02:42Z","modified":"2026-03-26T15:00:52Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:25:28.569748Z"}],"ghsa":[{"id":"GHSA-pw9r-4x84-7pxx","title":"HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue...","description":"HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks.","status":"published","published":"2026-03-26T15:30:38Z","modified":"2026-03-26T15:30:47Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:06:52.998793Z"}],"nvd":[{"id":"CVE-2025-55265","description":"HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks.","status":"published","published":"2026-03-26T13:16:25.63Z","modified":"2026-06-17T09:41:32.92Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:12:01.641503Z"}]}}