HCL Commerce 9.1.0-9.1.19.0
productDEcpe:/a:hcltechsw:commerce:9.1.0_-_9.1.19.0
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
2critical1high3medium0low
updated 2026-10-27
01
vulnerabilities (19)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-34486US | —OT critical | KEV |
| CVE-2024-38828US | — | Exploit |
| CVE-2026-29145US | — | Exploit |
| CVE-2026-24880US | — | Exploit |
| CVE-2024-38820US | medium5.3 | Exploit |
| CVE-2026-25854US | — | Exploit |
| CVE-2026-40976US | —OT elevated | Exploit |
| CVE-2026-29146US | — | — |
| CVE-2026-34483US | — | — |
| CVE-2026-34500US | — | — |
| CVE-2026-40975US | high7.5OT elevated | — |
| CVE-2026-32990US | — | — |
| CVE-2026-40972US | — | — |
| CVE-2026-29129US | —OT elevated | — |
| CVE-2026-40974US | critical9.8 | — |
| CVE-2026-40971US | critical9.1 | — |
| CVE-2026-40970US | medium6.8 | — |
| CVE-2026-40973US | — | — |
| CVE-2026-40977US | medium6.7 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-295Improper Certificate Validation3 CVEs
- CWE-287Improper Authentication2 CVEs
- CWE-116Improper Encoding or Escaping of Output1 CVEs
- CWE-1240Use of a Cryptographic Primitive with a Risky Implementation1 CVEs
- CWE-178Improper Handling of Case Sensitivity1 CVEs
- CWE-20Improper Input Validation1 CVEs
- CWE-208Observable Timing Discrepancy1 CVEs
- CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)19 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan