HCL Commerce Version 9.1.21.0

HCL Commerce 9.1.21.0

HCL Commerce 9.1.21.0 is a feature (mod pack) release for HCL Commerce Version 9.1.

  • HCL Commerce 9.1.21.0 was released on September 4, 2026.

For download information and the complete list of release files, see HCL Commerce eAssemblies (downloads)

Security updates

HCL Commerce 9.1.21.0 contains the following security-related fixes.
Affected software CVE(s) Vulnerability
HCL Commerce 9.1.0.0 - 9.1.20.0 CVE-2026-48779, CVE-2026-59869, CVE-2026-53550, CVE-2026-41293, CVE-2026-41284, CVE-2026-41901, CVE-2026-14682, CVE-2026-13506, CVE-2026-58059, CVE-2026-40984, CVE-2026-40992 Multiple vulnerabilities in open source components affect HCL Commerce
IBM WebSphere Application Server, IBM HTTP Server and IBM Java SDK

included in:

HCL Commerce 9.1.0 - 9.1.20		 CVE-2026-8633, CVE-2026-8620, CVE-2026-10571, CVE-2026-41254, CVE-2026-47057, CVE-2026-47063, CVE-2026-47058, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027, CVE-2026-47021, CVE-2026-47059, CVE-2026-47010, CVE-2026-8400, CVE-2026-16439, CVE-2026-16441, CVE-2026-16243, CVE-2026-9563, CVE-2026-8646, CVE-2026-9320, CVE-2026-9071, CVE-2026-9311, CVE-2026-9330, CVE-2026-57819, CVE-2026-54225, CVE-2026-64958, CVE-2026-11541, CVE-2026-42402, CVE-2026-42403, CVE-2026-42404, CVE-2026-5516, CVE-2026-16184, CVE-2026-15057, CVE-2026-8408, CVE-2026-10845, CVE-2026-14529, CVE-2026-11536, CVE-2026-9072, CVE-2026-8858, CVE-2026-10852, CVE-2026-10842, CVE-2026-14980, CVE-2026-2482, CVE-2026-11806, CVE-2026-4410, CVE-2026-11594, CVE-2026-11707, CVE-2026-11383, CVE-2026-9006, CVE-2026-9319, CVE-2026-8644, CVE-2026-14446, CVE-2026-50645, CVE-2026-9322, CVE-2026-9171, CVE-2026-16192, CVE-2026-14976, CVE-2026-15280, CVE-2026-14525, CVE-2026-18499, CVE-2026-29167, CVE-2026-29170, CVE-2026-44186, CVE-2026-34356, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44631 Multiple vulnerabilities in various IBM products affect HCL Commerce
Important: Non-applicable vulnerabilities are security vulnerabilities related to HCL Commerce and its companion or co-requisite software that the HCL Commerce team has determined require no action, as they do not impact HCL Commerce deployments.

Feature enhancements

The following features have been introduced in this release. Review the following list to ensure that your site is prepared once this update is applied.

Deployment
IBM Db2 12.1.4 Support
Full database support and compatibility testing for IBM Db2 version 12.1.4 in release 9.1.21.0.
Learn more...
Build Bitnami Redis and Zookeeper Docker Images
In HCL Commerce Version 9.1, Bitnami Redis 8.8.0 and Zookeeper 3.9.5, which are required for Elasticsearch-based search, are certified on xLinux. The corresponding Bitnami Redis and Zookeeper Helm charts are bundled with the 9.1.21.0 xLinux Helm chart.

You must build the Bitnami Redis 8.8.0 and Zookeeper 3.9.5 Docker images yourself.

Learn more...
Elasticsearch
For HCL Commerce 9.1.21.0 on xlinux, Elasticsearch has been updated to version 9.4.2. Elasticsearch 9 is deployed using Elastic Cloud on Kubernetes (ECK).
Learn more...
Solr-based Search SDK
Updated the procedure for obtaining Solr-based Search SDK in HCL Commerce Version 9.1.21.0. The Search bundle can now be downloaded from the My HCLSoftware portal and extracted to the Search Toolkit working directory.
Learn more...
Search
Elasticsearch-based search updates
Review release-specific updates for Elasticsearch-based search schemas, NiFi, Ingest, and Query services.
Learn more...
Searching by numeric values, measurements, and dimensions
This topic describes how HCL Commerce Search parses numeric search terms, generic unit-of-measure expressions, and dimension matchmaker expressions in HCL Commerce version 9.1.21.0.
Learn more...
Store
Volume pricing modes
Ruby and Ruby B2B storefronts support three volume pricing modes that control how volume pricing is displayed on the product details page (PDP) and applied in the shopping cart.
Learn more...

Defect fixes

See Version 9.1.21.0 in Fixes that are included in HCL Commerce releases for a detailed list of defects that were fixed in this release and its associated fix pack.

Supported software

HCL Commerce 9.1.21.0 has been tested with the following supported software. The icon highlights software updates for version 9.1.21.0.

Commerce Supported software Database Browsers
HCL Commerce Version 9.1.21.0
  • WebSphere Application Server 9.0.5.28 IFPH71757 + IFPH71453 + IFPH71370 + IFPH71706 + IFPH71648 + IFPH71384 + IFPH71556 + IFPH71923 + IFPH71454 + IFPH71590 + IFPH71893 + IFDT496500 + IFDT495928 + IFDT496327
  • IBM WebSphere Application Server Liberty 26.0.0.6 IFPH71585 + IFPH71687 + IFPH71719+ IFPH71839 + IFPH71916 + IFDT496294 + IFDT496531 + IFPH71678 + IFPH72053 + IFDT496165 + IFDT496328 + IFDT497316 + IFDT497580
  • IBM SDK, Java Technology Edition, Version 8.0.8.70
  • IBM HTTP Server9.0.5.28+ IFPH71594
  • IBM Installation Manager 1.10.1.4
  • Open liberty 26.0.0.7, open jdk 17.0.19
  • Solr
    • Solr 7.3
    • Solr 9.10.1
  • UBI8:
    • x86-648.10-1784753884
    • Power8.10-1784753884
  • Elasticsearch
    • x86-649.4.2
    • Power7.17.28
  • NiFi 1.28.1
  • NiFi Registry 1.28.1
  • CoreNLP 4.5.10
  • ZooKeeper
    • x86-643.9.5
    • Power3.9.3
  • Redis
    • x86-648.8.0
    • Power7.4.2-bv
  • Redisson 4.1.0
  • Vault
    • x86-642.0.3
    • Power1.14.8
  • Nodejs24
    • x86-641-1784752538
    • Power1-1784752538
  • Nodejs24-mini:
    • x86-641-1784771716
    • Power1-1784771716
  • OpenLiberty-full:
    • x86-6426.0.0.7-full-java17-openj9-ubi
    • Power26.0.0.7-full-java17-openj9-ubi
  • Kubernetes 1.30 to 1.36
  • Helm 3.17.x
  • Solr-based search solution
    • IBM Db2
      • 12.1.4
    • Oracle 19c
  • Elasticsearch-based search solution
    • IBM Db2
      • 12.1.4
    • Oracle 19c
  • Approval server
    • x86-64PostgreSQL 14.13
    • PowerPostgreSQL 14.13
  • Management Center for HCL Commerce
    • Edge 20+
    • Firefox 39+
    • Chrome 44+
    • Safari 10+
  • React-based storefronts
    • Edge 87+
    • Firefox 84+
    • Chrome 87+
    • Safari 14+
  • Aurora-based storefronts
    • Internet Explorer 20H2+
    • Edge 87+
    • Firefox 84+
    • Chrome 87+
    • Safari 14+