HCL Commerce
HCL · 7 CVEs
HCL Commerce is potentially affected by a denial of service and information disclosure vulnerability
May 13, 2024
A path traversal vulnerability affects HCL Commerce
Oct 23, 2023
HCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerability
Nov 4, 2022
HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)
Jul 29, 2022
HCL Commerce is affected by an Insufficient Session Expiration vulnerability.
May 6, 2022
" Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"
Aug 13, 2021
Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remot…
Jan 12, 2021
Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could a…
Jan 12, 2021
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-23576 | HCL Commerce is potentially affected by a denial of service and information disclosure vulnerability | HIGH | 0.45% | May 13, 2024 |
| CVE-2023-37532 | A path traversal vulnerability affects HCL Commerce | MEDIUM | 0.51% | Oct 23, 2023 |
| CVE-2022-38656 | HCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerability | CRITICAL | 0.73% | Nov 4, 2022 |
| CVE-2021-27785 | HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785) | MEDIUM | 0.18% | Jul 29, 2022 |
| CVE-2021-27751 | HCL Commerce is affected by an Insufficient Session Expiration vulnerability. | MEDIUM | 0.19% | May 6, 2022 |
| CVE-2021-27741 | " Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection" | CRITICAL | 1.15% | Aug 13, 2021 |
| CVE-2020-14274 | Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data… | HIGH | 1.31% | Jan 12, 2021 |
| CVE-2020-14275 | Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of us… | CRITICAL | 1.44% | Jan 12, 2021 |
Showing 1 to 7 of 7 CVEs