8.6
High
CVE-2022-38656 HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site…
Description
HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Commerce | Versions not published |
Other CVEs of HCL Commerce
The 4 CVEs of HCL Commerce →
CVE-2023-37532
HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files…
5.8
Medium
CVE-2021-27785
HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information
3.9
Low
CVE-2021-27751
HCL Commerce is affected by an Insufficient Session Expiration vulnerability
4.4
Medium