Skip to content
Threat Feed
high advisory

HCL Aftermarket DPC SQL Injection Vulnerability (CVE-2025-55262)

CVE-2025-55262 is a SQL Injection vulnerability affecting HCL Aftermarket DPC, allowing an attacker to retrieve sensitive information from the database and potentially gain unauthorized access.

A SQL Injection vulnerability, identified as CVE-2025-55262, affects HCL Aftermarket DPC. This vulnerability allows an attacker to inject malicious SQL code into input fields, which can then be executed by the database. Successful exploitation could lead to the retrieval of sensitive information from the database, potentially exposing user credentials, financial data, or other confidential information. The vulnerability was reported by HCL Software and has a CVSS v3.1 score of 8.3, indicating a…

Detection coverage 2

Detect Suspicious SQL Injection Attempts via URI

high

Detects potential SQL injection attempts based on common SQL syntax in URI queries.

sigma tactics: initial_access techniques: T1190, T1595 sources: webserver, linux

Detect Suspicious SQL Injection Attempts via POST data

high

Detects potential SQL injection attempts based on common SQL syntax in POST data.

sigma tactics: initial_access techniques: T1190, T1595 sources: webserver, linux

Detection queries are kept inside the platform. Get full rules →