by Kastro
Paper/Archive/CVE-2021-27741

CVE-2021-27741

HCL — " Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"

EPSS 1%CVSS 9.1
critical.is priorityof 100
41
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 67.0.669 × 2013.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

" Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"

Affected

ProductAffectedFixed inSource
Commerce"Commerce 8.0.4.0 - 8.0.4.26, 9.0.1.0 - 9.0.1.15, 9.1 - 9.1.5"–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

References

refsupport.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0089834