Vulnerabilities (CVE)

Filtered by vendor Hcltechsw Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-27741 1 Hcltechsw 1 Hcl Commerce 2021-08-24 6.4 MEDIUM 9.1 CRITICAL
" Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"
CVE-2020-14245 1 Hcltechsw 1 Onetest Performance 2021-07-21 7.5 HIGH 9.8 CRITICAL
HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources.
CVE-2020-14275 1 Hcltechsw 1 Hcl Commerce 2021-01-14 7.5 HIGH 9.8 CRITICAL
Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.