HCL Software HCL Commerce

• CVE-2023-37532 Medium 5.8 A path traversal vulnerability affects HCL Commerce 0.6%
• CVE-2022-38656 High 8.6 HCL Commerce, when using Elasticsearch, could be affected by a denial of service vulnerability 0.8%
• CVE-2021-27785 Low 3.9 HCL Commerce could allow a local attacker to obtain sensitive personal information (CVE-2021-27785) 0.2%
• CVE-2021-27751 Medium 4.4 HCL Commerce is affected by an Insufficient Session Expiration vulnerability. 0.2%