← All advisories

Medium severity5.8NVD Advisory· Published Oct 23, 2023· Updated Jun 17, 2026

CVE-2023-37532

CVE-2023-37532

Description

HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system.

Affected products

3

HCLTech/Commerce
cpe:2.3:a:hcltech:commerce:*:*:*:*:*:*:*:*
Range: >=9.1.8,<=9.1.13.2
HCL Software/Commerce Remote Store serverllm-create
HCL Software/Commercecpe-rescue
Range: 9.1.8 – 9.1.13.2

Patches

Vulnerability mechanics

References

1

support.hcltechsw.com/csmnvdVendor Advisory

News mentions

0

No linked articles in our index yet.