CVE-2025-55275

Low · 3.7

CVSS

3.7

EPSS

0.2%

Published

Mar 26, 2026

CISA due date

—

The record

HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability using which an attacker can exploit concurrent sessions to hijack or impersonate an admin user.

Affected packages

Ecosystem	Package	Introduced	Fixed