Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
HCL Aftermarket DPC is affected by SQL Injection which allows attacker to exploit this vulnerability to retrieve sensitive information from the database.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-55262 HCL Aftermarket DPC is affected by SQL Injection which allows attacker to exploit this vulnerability to retrieve sensitive information from the database. https://www.cve.org/CVERecord?id=CVE-2025-55262
Post summary
The post notes that HCL Aftermarket DPC is susceptible to a SQL injection that could expose sensitive data, but it provides no PoC, exploit, or mitigation.
🟠 CVE-2025-55262 - High HCL Aftermarket DPC is affected by SQL Injection which allows attacker to exploit this vulnerability to retrieve sensitive information from the database. https://www.thehackerwire.com/vulnerability/CVE-2025-55262/ https://t.co/Hk1Zd2x9b2
Post summary
A newly disclosed high‑severity SQL injection flaw (CVE‑2025‑55262) in HCL Aftermarket DPC that enables attackers to read sensitive data, with no evidence of active exploitation, PoC, or patch availability.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | hcltech | aftermarket_cloud | 1.0.0 | - | - |