4.4
Moyenne
CVE-2021-27751 HCL Commerce is affected by an Insufficient Session Expiration vulnerability
Description
HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL Commerce | Versions non publiées |
Autres CVE de HCL Commerce
Les 4 CVE de HCL Commerce →
CVE-2023-37532
HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files…
5.8
Moyenne
CVE-2022-38656
HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site…
8.6
Élevée
CVE-2021-27785
HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information
3.9
Faible