High severity7.5NVD Advisory· Published Jan 12, 2021· Updated Jun 17, 2026

CVE-2020-14274

Description

Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data via unknown vectors.

Affected products

Hcltechsw/Hcl Commerce
cpe:2.3:a:hcltechsw:hcl_commerce:*:*:*:*:*:*:*:*
Range: >=9.0.1.9,<=9.0.1.14
HCL/HCL Commercedescription
HCL Software/Commercellm-create
Range: 9.0.1.9 - 9.0.1.14, 9.1 - 9.1.4

Patches

Vulnerability mechanics

References

support.hcltechsw.com/csmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000