Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-27785

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website.

Published

2022-07-30T00:15:08.380

Last Modified

2024-11-21T05:58:33.767

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 3.9 (LOW)

Weaknesses
  • Type: Secondary
    CWE-522
  • Type: Primary
    CWE-522
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hcltechsw hcl_commerce ≤ 9.0.1.18 Yes
Application hcltechsw hcl_commerce ≤ 9.1.10 Yes
References