HC
Product
Hcl Commerce
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 1
Watch
Add Hcl Commerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-38656 | 9.8 | Dec 12 | HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes Affected: 9.1.8 through 9.1.11 |
| CVE-2020-14275 | 9.8 | Jan 12 | Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data,… Affected: 9.0.0.5 through 9.0.0.13; 9.0.1.0 through 9.0.1.14; 9.1 through 9.1.4.0 |
| CVE-2021-27741 | 9.1 | Aug 13 | " Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection" Affected: 8.0.4.0 through 8.0.4.26; 9.0.1.0 through 9.0.1.15; 9.1 through 9.1.5 |
Showing 3
