VULNERABILITY INTELLIGENCE

CVE-2021-27785

CVSS score3.9 LOW
EPSS probability0.18%
CISA KEVNot currently listed
Published2022-07-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Description

HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website.

Weakness classification

  • psirt@hcl.com: CWE-522
  • nvd@nist.gov: CWE-522

Primary references