CVE-2020-14274: Hcltechsw Hcl Commerce

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data via unknown vectors.

Affected products

• Hcltechsw Hcl Commerce: from 9.0.1.9, up to and including 9.0.1.14; from 9.1, up to and including 9.1.4.0

Published 2021-01-12. Last modified 2026-06-17.