Lucene search

K
cvelistHCLCVELIST:CVE-2024-23576
HistoryMay 13, 2024 - 9:28 p.m.

CVE-2024-23576 HCL Commerce is potentially affected by a denial of service and information disclosure vulnerability

2024-05-1321:28:44
HCL
www.cve.org
hcl commerce
security vulnerability
denial of service
user data disclosure
unauthorized operations

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Security vulnerability in HCL Commerce 9.1.12 and 9.1.13 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Commerce",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "9.1.12, 9.1.13"
      }
    ]
  }
]

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for CVELIST:CVE-2024-23576