Hcltechsw: >> Hcl Commerce >> 9.1.9 Security Vulnerabilities
HCL Commerce, when using Elasticsearch, can allow a remote attacker to cause a denial of service attack on the site and make administrative changes.
CVSS Score
8.6
EPSS Score
0.009
Published
2022-12-12
HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website.
CVSS Score
3.9
EPSS Score
0.001
Published
2022-07-30