medium4.4
CVE-2021-27751
HCL Commerce is affected by an Insufficient Session Expiration vulnerability.
Impact
HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltechsw | Hcl Commerce | from 8.0.0.0 before 8.0.4.28 from 9.0.0.0 before 9.0.1.18 from 9.1.0 before 9.1.9 |