{"containers": {"cna": {"affected": [{"product": "HCL Commerce", "vendor": "n/a", "versions": [{"status": "affected", "version": "9.0.0.5 through 9.0.0.13"}, {"status": "affected", "version": "9.0.1.0 through 9.0.1.14"}, {"status": "affected", "version": "9.1 through 9.1"}]}], "descriptions": [{"lang": "en", "value": "Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations."}], "problemTypes": [{"descriptions": [{"description": "\"Denial of Service and Information Disclosure\"", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-01-12T14:26:58", "orgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "shortName": "HCL"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086271"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@hcl.com", "ID": "CVE-2020-14275", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "HCL Commerce", "version": {"version_data": [{"version_value": "9.0.0.5 through 9.0.0.13"}, {"version_value": "9.0.1.0 through 9.0.1.14"}, {"version_value": "9.1 through 9.1"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "\"Denial of Service and Information Disclosure\""}]}]}, "references": {"reference_data": [{"name": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086271", "refsource": "CONFIRM", "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086271"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T12:39:36.248Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086271"}]}]}, "cveMetadata": {"assignerOrgId": "1e47fe04-f25f-42fa-b674-36de2c5e3cfc", "assignerShortName": "HCL", "cveId": "CVE-2020-14275", "datePublished": "2021-01-12T14:26:58", "dateReserved": "2020-06-17T00:00:00", "dateUpdated": "2024-08-04T12:39:36.248Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hcltechsw:hcl_commerce:*:*:*:*:*:*:*:*", "matchCriteriaId": "F17A0D77-6C38-4643-941D-872F1B4424C6", "versionEndIncluding": "9.0.0.13", "versionStartIncluding": "9.0.0.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_commerce:*:*:*:*:*:*:*:*", "matchCriteriaId": "C9DEB087-1EDE-44B9-8352-AFB7EB7E1A2F", "versionEndIncluding": "9.0.1.14", "versionStartIncluding": "9.0.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:hcltechsw:hcl_commerce:*:*:*:*:*:*:*:*", "matchCriteriaId": "708CF20D-E70C-4B80-ADEB-0CE003780A46", "versionEndIncluding": "9.1.4.0", "versionStartIncluding": "9.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations."}, {"lang": "es", "value": "Una vulnerabilidad de seguridad en HCL Commerce versiones 9.0.0.5 hasta 9.0.0.13, versiones 9.0.1.0 hasta 9.0.1.14 y versiones 9.1 hasta 9.1.4, podr\u00eda permitir una denegaci\u00f3n de servicio, divulgaci\u00f3n de datos personales del usuario y llevar a cabo operaciones administrativas no autorizadas"}], "id": "CVE-2020-14275", "lastModified": "2021-01-14T01:22:13.300", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-01-12T15:15:13.533", "references": [{"source": "psirt@hcl.com", "tags": ["Vendor Advisory"], "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0086271"}], "sourceIdentifier": "psirt@hcl.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}