low3.9
CVE-2021-27785
HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information.
Impact
HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltechsw | Hcl Commerce | from 9.0.1 through 9.0.1.18 from 9.1.0 through 9.1.10 |