HCL Software HCL Commerce vulnerabilities

4 vulnerabilities

Known vulnerabilities in HCL Software HCL Commerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.4CVE-2021-27751hcl softwarehcl commerce+1
EPSS score
0.19%
HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.5CVE-2021-27785hcl softwarehcl commerce+1
EPSS score
0.18%
HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website.9.8CVE-2022-38656hcl softwarehcl commerce+1
EPSS score
0.75%
HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes.5.8CVE-2023-37532hcl softwarehcl commerce+1
EPSS score
0.51%
HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system.