by Kastro
Paper/Archive/CVE-2020-14275

CVE-2020-14275

HCL — Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of ser…

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 73.5.735 × 2014.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

Affected

ProductAffectedFixed inSource
HCL Commerce9.0.0.5 through 9.0.0.13–CNA
HCL Commerce9.0.1.0 through 9.0.1.14–CNA
HCL Commerce9.1 through 9.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsupport.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086271