Critical severity9.8NVD Advisory· Published Jan 12, 2021· Updated Jun 17, 2026

CVE-2020-14275

Description

Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations.

Affected products

Hcltechsw/Hcl Commerce
cpe:2.3:a:hcltechsw:hcl_commerce:*:*:*:*:*:*:*:*
Range: >=9.0.0.5,<=9.0.0.13
HCL Software/Commercecpe-rescue
HCL Commerce/HCL Commercellm-fuzzy
Range: 9.0.0.5-9.0.0.13, 9.0.1.0-9.0.1.14, 9.1-9.1.4

Patches

Vulnerability mechanics

References

support.hcltechsw.com/csmnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000