Cross Domain Script Include Vulnerability in HCL Aftermarket DPC

CVE-2025-55273

What is CVE-2025-55273?

HCL Aftermarket DPC is susceptible to a Cross Domain Script Include vulnerability that allows an attacker to leverage external scripts to manipulate the Document Object Model (DOM). This exploitation enables the alteration of application content or behavior, potentially compromising sensitive user information such as cookies and session tokens, which can lead to unauthorized session hijacking.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References