Skip to content

Known vulnerabilities in HCL Software HCL Commerce

Is your version affected?

CVE Summary Score Published
CVE-2023-37532 HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files… 5.8 Medium Oct 23, 2023
CVE-2022-38656 HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site… 8.6 High Nov 4, 2022
CVE-2021-27785 HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information 3.9 Low Jul 29, 2022
CVE-2021-27751 HCL Commerce is affected by an Insufficient Session Expiration vulnerability 4.4 Medium May 6, 2022

Other HCL Software products