CVE-2021-27751: Hcltechsw Hcl Commerce

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.

Affected products

• Hcltechsw Hcl Commerce: from 8.0.0.0, before 8.0.4.28 (fixed in 8.0.4.28); from 9.0.0.0, before 9.0.1.18 (fixed in 9.0.1.18); from 9.1.0, before 9.1.9 (fixed in 9.1.9)

Published 2022-05-06. Last modified 2026-06-17.