CVE-2025-55271 LOW

CVE-2025-55271: HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability

Vendor Hcl

Product Aftermarket DPC

Weakness CWE-113 · HTTP response splitting

Published March 26, 2026

Last update March 26, 2026

View on NVD All CVEs

CVSS base score

3.1/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction Required

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be able to execute arbitrary commands or inject harmful content into the response..

Key dates

02Disclosure timeline

March 26, 2026 CVE published

March 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-55271 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/113.html

Related vulnerabilities

04Related CVE

CVE-2023-0508 Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in GitLab CVE-2023-32708 HTTP Response Splitting via the ‘rest’ SPL Command CVE-2025-53007 arduino-esp32 vulnerable to CRLF injection in WebServer.cpp CVE-2020-5216 Limited header injection when using dynamic overrides with user input in RubyGems secure_headers CVE-2020-3117 Cisco Web Security Appliance and Cisco Content Security Management Appliance HTTP Header Injection Vulnerability