Skip to contentSap Se Commerce vulnerabilities
- sap commerceAn attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205,...CVE-2022-412048.8 High
- sap commerceIf configured to use an Oracle database and if a query is created using the flexible search java...CVE-2021-420649.8 Critical
- sap commerceSAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary...CVE-2021-405028.8 High
- sap commerce cloudWhen SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME...CVE-2021-336664.7 Medium
- sap commerce, sap se commerce (backoffice search) +1 moreSAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low...CVE-2021-276196.5 Medium
- sap commerceSAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain...CVE-2021-276029.9 Critical
- sap commerceSAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required...CVE-2021-21477EPSS 29.8%9.9 Critical
- sap commerce cloudSAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to...CVE-2021-214455.4 Medium
- sap se commerce cloud (accelerator payment mock), sap commerce cloud \(accelerator payment mock\) +1 moreSAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an...CVE-2020-268107.5 High
- sap se commerce cloud (accelerator payment mock), sap commerce cloud \(accelerator payment mock\) +1 moreSAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an...CVE-2020-268115.3 Medium
- sap commerce cloudSAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing...CVE-2020-268095.3 Medium
- sap commerce cloudSAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that...CVE-2020-63634.6 Medium
- sap commerce cloudSAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs,...CVE-2020-62725.4 Medium
- sap commerceSAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL...CVE-2020-63026.4 Medium
- sap commerceSAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under...CVE-2020-62648.6 High
- sap commerce, sap se commerce (data hub), sap commerce data hub +2 moreSAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808...CVE-2020-62659.8 Critical
- sap se commerce, sap commerce cloud +1 moreSAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the...CVE-2020-62389.3 Critical
- sap se commerce, sap commerce cloud +1 moreSAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an...CVE-2020-62325.3 Medium
- sap commerce cloud, sap se commerce cloud (testweb extension) +1 moreThe SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently...CVE-2020-62016.1 Medium
- sap commerce cloud, sap se commerce cloud (smartedit extension) +1 moreThe SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulnerable to client...CVE-2020-62005.4 Medium
- sap commerce cloud, sap se commerce cloud (virtualjdbc extension) +1 moreDue to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6...CVE-2019-0344In KEV9.8 Critical
- sap commerce cloud, sap se commerce cloud (mediaconversion extension) +1 moreSAP Commerce Cloud (Mediaconversion Extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905,...CVE-2019-03438.8 High
- sap commerce cloud, sap se commerce cloud (ex sap hybris commerce) (hy com) +1 moreSAP Commerce Cloud (previously known as SAP Hybris Commerce), (HY_COM, versions 6.3, 6.4, 6.5, 6...CVE-2019-03227.5 High
- sap hybris, sap se commerce (ex. sap hybris commerce) +1 moreSAP Commerce (previously known as SAP Hybris Commerce), before version 6.7, does not sufficiently...CVE-2019-02386.1 Medium