Hcl Commerce Security Vulnerabilities and Issues — Hcl Commerce CVE List

Lucene search

HcltechswHcl Commerce

3 matches found

CVE•added 2022/12/12 1:15 p.m.•44 views

CVE-2022-38656

HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes.

9.8CVSS9AI score0.01175EPSS

CVE•added 2021/08/13 2:15 p.m.•38 views

CVE-2021-27741

" Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"

9.1CVSS9.1AI score0.00371EPSS

CVE•added 2021/01/12 3:15 p.m.•29 views

CVE-2020-14275

Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

9.8CVSS9.1AI score0.00472EPSS