3.9
Faible
CVE-2021-27785 HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information
Description
HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL Commerce | Versions non publiées |
Autres CVE de HCL Commerce
Les 4 CVE de HCL Commerce →
CVE-2023-37532
HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files…
5.8
Moyenne
CVE-2022-38656
HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site…
8.6
Élevée
CVE-2021-27751
HCL Commerce is affected by an Insufficient Session Expiration vulnerability
4.4
Moyenne