CVE-2024-23576

—

CVSS 3.1

7.1 high

EPSS

<1%p38

Published

May 14, 2024 (May 14, 2024)

Modified

Jun 17, 2026

Description

Security vulnerability in HCL Commerce 9.1.12 and 9.1.13 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

Vendors: hcltechsw
Products: hcl commerce
Weakness: CWE-285
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.