CVE-2020-14275

9.8 criticalEPSS 1.5%

Critical (9.8) in hcltechsw hcl commerce. EPSS 1.5% chance of exploitation in the next 30 days.

Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
Published: 2021-01-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hcltechsw:hcl_commerce

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086271
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086271

Check your stack JSON