---
cve: "CVE-2025-55265"
severity: "MEDIUM"
cvss: 6.5
epss: "32%"
vendor: "HCL"
kev: false
exploited: false
published: "2026-03-26 13:16:25"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-04T00:10:33+02:00"
---

# CVE-2025-55265

> 6.5 MEDIUM

## Beschreibung

HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacks.

## CVSS-Vektor

```
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Erforderlich | good |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Keine | good |
| A Verfügbarkeit | Keine | good |

## Referenzen

- <https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129793>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2025-55265) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_