What is CVE-2021-27751?

CVE-2021-27751 is a medium-severity vulnerability in Hcl Software Commerce, classified under Insufficient Session Expiration. CVSS score: 4.4/10. Published 2022-05-06.

How severe is CVE-2021-27751?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Vulnerability in Hcl Software Commerce

CVE-2021-27751

HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the application are still accessible.

EPSS: 0.002 (7.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N.

Affected products

Hcl Software Commerce — versions 8.0 - 8.0.4.27, 9.0 - 9.0.1.17, 9.1.0 - 9.1.8
Hcltechsw Hcl_commerce

Weakness classification (CWE)

CWE-613 — Insufficient Session Expiration

References

psirt@hcl.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-27751?: CVE-2021-27751 is a medium-severity vulnerability in Hcl Software Commerce, classified under Insufficient Session Expiration. CVSS score: 4.4/10. Published 2022-05-06.
How severe is CVE-2021-27751?: Medium severity. CVSS v3 base score is 4.4 out of 10.