sap commerce_cloud Schwachstellen (CVE)

Für sap commerce_cloud veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse
5.3Mittel
CVE-2026-24321

Information Disclosure vulnerability in SAP Commerce Cloud

SAP_SE SAP Commerce Cloud

SAP Commerce Cloud exposes multiple API endpoints to unauthenticated users, allowing them to submit requests to these open endpoints to retrieve sensitive information that is not intended to be publicly accessible via the front-end. This vulnerability has a l…

5.9Mittel
CVE-2026-23684

Race condition vulnerability in SAP Commerce Cloud

SAP_SE SAP Commerce Cloud

A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in a cart entry being created with erroneous product value which could be checked out. This leads to high impact on data i…

9.8Kritisch
CVE-2019-0344 KEV

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

SAP SE SAP Commerce Cloud (virtualjdbc extension); sap commerce_cloud

Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.

7.5%EPSS