HC
Product
Hcl Commerce
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 1
Watch
Add Hcl Commerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-38656 | 9.8 | Dec 12 | HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes Affected: 9.1.8 through 9.1.11 |
| CVE-2020-14275 | 9.8 | Jan 12 | Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data,… Affected: 9.0.0.5 through 9.0.0.13; 9.0.1.0 through 9.0.1.14; 9.1 through 9.1.4.0 |
| CVE-2021-27741 | 9.1 | Aug 13 | " Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection" Affected: 8.0.4.0 through 8.0.4.26; 9.0.1.0 through 9.0.1.15; 9.1 through 9.1.5 |
| CVE-2020-14274 | 7.5 | Jan 12 | Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data via unknown vectors Affected: 9.0.1.9 through 9.0.1.14; 9.1 through 9.1.4.0 |
| CVE-2024-23576 | 7.1 | May 14 | Security vulnerability in HCL Commerce 9.1.12 and 9.1.13 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations Affected: 9.1.12 before 9.1.14 |
| CVE-2021-27785 | 5.0 | Jul 29 | HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785) Affected: 9.0.1 through 9.0.1.18; 9.1.0 through 9.1.10 |
| CVE-2021-27751 | 3.3 | May 6 | HCL Commerce is affected by an Insufficient Session Expiration vulnerability Affected: 8.0.0.0 before 8.0.4.28; 9.0.0.0 before 9.0.1.18; 9.1.0 before 9.1.9 |
Showing 7