CVE-2021-27751 - HCL Commerce is affected by an Insufficient Session Expiration vulnerability.

Back Back to CVE browser

MEDIUM

HCL Commerce is affected by an Insufficient Session Expiration vulnerability.

Published May 6, 2022

4.4

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.

Affected products

Vendor HCL Software Product HCL Commerce Default
unknown
Affected
- 8.0 - 8.0.4.27
- 9.0 - 9.0.1.17
- 9.1.0 - 9.1.8

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
HCL Software	HCL Commerce	unknown	Affected 8.0 - 8.0.4.27 9.0 - 9.0.1.17 9.1.0 - 9.1.8

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-613

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-14492
Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0097650
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-14492		Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0097650		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner HCL

Published May 6, 2022

Updated Sep 16, 2024

Reserved Feb 26, 2021

Link CVE-2021-27751

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2021-27751

Red Hat

No data

ENISA EUVD

Assigner HCL

Published May 6, 2022

Updated Sep 16, 2024

Link EUVD-2021-14492

GitHub

No data