Hcltechsw

Records51All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Hcltechsw records in CISA KEV

No Hcltechsw vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hcl Launch 28 records LOW Hcl Devops Deploy 20 records LOW Hcl Commerce 7 records MEDIUM Bigfix Bare Osd Metal Server Webui 3 records MEDIUM Onetest Performance 3 records MEDIUM Bigfix Insights For Vulnerability Remediation 2 records LOW Connections 1 record LOW Hcl Client Application Access 1 record MEDIUM

Records

7 records in Hcl Commerce · all components

TI-2020-11162 CVE-2020-14275 · GHSA-hjxr-5xv6-cvq9

Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14…

MEDIUM 45

Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrati…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01457 Published 2021-01-12 No fix listed

TI-2022-18189 CVE-2022-38656 · GHSA-69wm-75j8-rv9g

HCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerability

MEDIUM 44

HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00832 Published 2022-11-04 No fix listed

TI-2021-09148 CVE-2021-27741 · GHSA-j9xg-v3p9-32vg

" Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"

MEDIUM 42

" Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01152 Published 2021-08-13 No fix listed CWE-611

TI-2020-11161 CVE-2020-14274 · GHSA-c2c3-chmq-vwx2

Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1…

LOW 36

Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data via unknown vectors.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01327 Published 2021-01-12 No fix listed

TI-2024-15605 CVE-2024-23576 · GHSA-8mqg-fwg4-6pjh

HCL Commerce is potentially affected by a denial of service and information disclosure vulnerability

LOW 34

Security vulnerability in HCL Commerce 9.1.12 and 9.1.13 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00452 Published 2024-05-13 No fix listed CWE-285

TI-2021-09179 CVE-2021-27785 · GHSA-rcqq-qpj9-p4v3

HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785)

LOW 22

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00181 Published 2022-07-29 No fix listed CWE-522

TI-2021-09150 CVE-2021-27751 · GHSA-qqfm-8ggf-xpch

Insufficient session expiration in HCL Commerce

LOW 20

HCL Commerce is affected by an Insufficient Session Expiration vulnerability.

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00186 Published 2022-05-06 No fix listed CWE-613

Open these records in search →

Critical	6
High	10
Medium	35
Low	0
No CVSS	0