What’s Vulnerable › Vulnerabilities

CVE-2020-14275

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-01-12 · updated 2026-06-17

Description

Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

Affected products

• HCL Software HCL Commerce: from 9.0.0.5 through 9.0.0.13; from 9.0.1.0 through 9.0.1.14; from 9.1 through 9.1.4.0

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086271
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086271

Get alerted when CVE-2020-14275 or the next vulnerability affects your stack