CVE-2025-55271HIGH 8.8EPSS p23.4%
CVE-2025-55271CVE-2025-55271
Description
HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be able to execute arbitrary commands or inject harmful content into the response..
Scoring
| CVSS 3.1 | 8.8 (HIGH) |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| EPSS | 0.32% probability of exploitation · percentile 23.4% · 2026-06-19T12:03:05Z |
| Published | 2026-03-26 |
| Last modified | 2026-03-26 |
Underlying weaknesses· 1
References
1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')cwe-113 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.