Cross Domain Script Include Vulnerability in HCL Aftermarket DPC

CVE-2025-55273

What is CVE-2025-55273?

HCL Aftermarket DPC is susceptible to a Cross Domain Script Include vulnerability that allows an attacker to leverage external scripts to manipulate the Document Object Model (DOM). This exploitation enables the alteration of application content or behavior, potentially compromising sensitive user information such as cookies and session tokens, which can lead to unauthorized session hijacking.

References