CVE-2025-55268
Received Received - Intake

Spamming Vulnerability in HCL Aftermarket DPC Causes DoS

Publication date: 2026-03-26

Last updated on: 2026-03-26

Assigner: HCL Software

Description
HCL Aftermarket DPC is affected by Spamming Vulnerability which can allow the actor to excessive spamming can consume server bandwidth and processing resources which may lead to Denial of Service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-03-26
Last Modified
2026-03-26
Generated
2026-07-06
AI Q&A
2026-03-26
EPSS Evaluated
2026-07-05
NVD
CVE-2025-55268
EUVD
EUVD-2025-209059

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hcltech aftermarket_cloud 1.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-799 The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The vulnerability in HCL Aftermarket DPC is a spamming vulnerability that allows an attacker to perform excessive spamming. This excessive spamming can consume server bandwidth and processing resources.

As a result, the server may become overwhelmed, potentially leading to a Denial of Service (DoS) condition.

Impact Analysis

This vulnerability can impact you by causing a Denial of Service on the affected server.

  • Excessive spamming can consume server bandwidth.
  • It can also consume processing resources.
  • The combined effect may make the server unavailable or unresponsive.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-55268. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart