CVE-2024-23576

HCL Commerce is potentially affected by a denial of service and information disclosure vulnerability

High · published May 13, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

Security vulnerability in HCL Commerce 9.1.12 and 9.1.13 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00452 · 38.3th percentile
Published
2024-05-13T21:28Z
EPSS history
Timeline
  • 13 MAY 21:28Z
    HCL Commerce is potentially affected by a denial of service and information disclosure vulnerability
    cvelistv5