Xxe

" Security vulnerability in HCL Commerce Management Center allowing XML external entity XXE injection"...

CVE-2021-27741

CVE-2021-27741 affects the HCL Commerce Management Center and is caused by an XML External Entity (XXE) injection. According to the stored records, the vulnerability has a CVSS v3.1 base score of 9.1 (CRITICAL) with network attack vector, low attack complexity, no privileges required, and impacts...

PT-2021-17619

Name of the Vulnerable Software and Affected Versions: HCL Commerce Management Center affected versions not specified Description: The issue concerns a security vulnerability in HCL Commerce Management Center that allows XML external entity XXE injection. Recommendations: At the moment, there is ...

CVE-2021-27741: Improper Restriction of XML External Entity Reference

" Security vulnerability in HCL Commerce Management Center allowing XML external entity XXE injection"...