CVE-2025-55268
Received Received - Intake
Spamming Vulnerability in HCL Aftermarket DPC Causes DoS

Publication date: 2026-03-26

Last updated on: 2026-03-26

Assigner: HCL Software

Description
HCL Aftermarket DPC is affected by Spamming Vulnerability which can allow the actor to excessive spamming can consume server bandwidth and processing resources which may lead to Denial of Service.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-26
Last Modified
2026-03-26
Generated
2026-06-16
AI Q&A
2026-03-26
EPSS Evaluated
2026-06-14
NVD
CVE-2025-55268
EUVD
EUVD-2025-209059
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
hcltech aftermarket_cloud 1.0.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-799 The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

The vulnerability in HCL Aftermarket DPC is a spamming vulnerability that allows an attacker to perform excessive spamming. This excessive spamming can consume server bandwidth and processing resources.

As a result, the server may become overwhelmed, potentially leading to a Denial of Service (DoS) condition.

Impact Analysis

This vulnerability can impact you by causing a Denial of Service on the affected server.

  • Excessive spamming can consume server bandwidth.
  • It can also consume processing resources.
  • The combined effect may make the server unavailable or unresponsive.
Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-55268. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart