CVE-2024-23576

7.1 highEPSS 0.5%

High (7.1) in hcltechsw hcl commerce. EPSS 0.5% chance of exploitation in the next 30 days.

Security vulnerability in HCL Commerce 9.1.12 and 9.1.13 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2024-05-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hcltechsw:hcl_commerce

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112907
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0112907

Check your stack JSON