CVE-2025-55269

Katalog CVE

CVSS 9.8 · Critical EPSS 0,24%

Kerentanan Weak Password Requirements pada hcltech aftermarket cloud. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to guess weak passwords or use brute-force techniques to gain unauthorized access to user accounts.

Rincian

Terbit di NVD

26 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-521: Weak Password Requirements

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 14,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793 advisory vendor