4.4
Medium
CVE-2021-27751 HCL Commerce is affected by an Insufficient Session Expiration vulnerability
Description
HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Commerce | Versions not published |
Other CVEs of HCL Commerce
The 4 CVEs of HCL Commerce →
CVE-2023-37532
HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files…
5.8
Medium
CVE-2022-38656
HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site…
8.6
High
CVE-2021-27785
HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information
3.9
Low