CVE-2021-27751

3.3 lowEPSS 0.2%

Low (3.3) in hcltechsw hcl commerce. EPSS 0.2% chance of exploitation in the next 30 days.

HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-613
Published: 2022-05-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hcltechsw:hcl_commerce

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0097650
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0097650

Check your stack JSON