Product by HCL Software

    HCL Commerce

    7 known vulnerabilities in HCL Commerce (HCL Software), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in HCL Commerce (HCL Software)
    CriticalCVE-2020-14275

    HCL Commerce: Denial of Service

    		9.8
    CriticalCVE-2021-27741

    Commerce: XML External Entity (XXE)

    		9.1
    HighCVE-2020-14274

    HCL Commerce: Information Disclosure

    		7.5
    CriticalCVE-2022-38656

    HCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerability

    also in 1 other product

    		8.6
    HighCVE-2024-23576

    HCL Commerce is potentially affected by a denial of service and information disclosure vulnerability

    also in 1 other product

    		7.1
    MediumCVE-2021-27751

    HCL Commerce: Insufficient Session Expiration

    also in 1 other product

    		4.4
    MediumCVE-2021-27785

    HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)

    also in 1 other product

    		3.9

    All products by HCL Software