Sap Commerce vulnerabilities

• sap commerce cloud Information Disclosure vulnerability in SAP Commerce Cloud CVE-2026-24321 5.3 MediumFebruary 10, 2026
• sap commerce cloud Race condition vulnerability in SAP Commerce Cloud CVE-2026-23684 5.9 MediumFebruary 10, 2026
• sap commerce backoffice Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice CVE-2024-45278 5.4 MediumOctober 8, 2024
• sap commerce, commerce cloud, commerce hycom +2 more Information Disclosure Vulnerability in SAP Commerce CVE-2024-41733 5.3 MediumAugust 13, 2024
• sap commerce backoffice Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice CVE-2024-41735 5.4 MediumAugust 13, 2024
• sap commerce cloud Information Disclosure Vulnerability in SAP Commerce Cloud CVE-2024-33003 7.4 HighAugust 13, 2024
• sap se commerce, sap commerce cloud, commerce hycom +2 more [CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce CVE-2024-39597 7.2 HighJuly 9, 2024
• sap commerce cloud Improper Access Control vulnerability in SAP Commerce Cloud CVE-2023-42481 8.1 HighDecember 12, 2023
• sap se commerce (occ api), sap commerce cloud, commerce hycom +2 more Information Disclosure vulnerability in SAP Commerce (OCC API) CVE-2023-37486 5.9 MediumAugust 8, 2023
• sap commerce cloud, sap se commerce, sap commerce hycom +2 more SAP Commerce accepts empty passphrases. CVE-2023-39439 8.8 HighAugust 8, 2023
• sap commerce webservices 2.0 (swagger ui), commerce webservices 2.0 +1 more Due to a lack of proper input validation, SAP Commerce Webservices 2.0 (Swagger UI) - versions... CVE-2022-41266 8.0 HighDecember 13, 2022
• sap commerce An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205,... CVE-2022-41204 8.8 HighOctober 11, 2022
• sap commerce If configured to use an Oracle database and if a query is created using the flexible search java... CVE-2021-42064 9.8 CriticalDecember 14, 2021
• sap commerce SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary... CVE-2021-40502 8.8 HighNovember 10, 2021
• sap commerce cloud When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME... CVE-2021-33666 4.7 MediumJune 9, 2021
• sap commerce, sap se commerce (backoffice search) +1 more SAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low... CVE-2021-27619 6.5 MediumMay 11, 2021
• sap commerce SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain... CVE-2021-27602 9.9 CriticalApril 13, 2021
• sap commerce SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required... CVE-2021-21477 EPSS 29.8% 9.9 CriticalFebruary 9, 2021
• sap commerce cloud SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to... CVE-2021-21445 5.4 MediumJanuary 12, 2021
• sap se commerce cloud (accelerator payment mock), sap commerce cloud \(accelerator payment mock\) +1 more SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an... CVE-2020-26810 7.5 HighNovember 10, 2020
• sap se commerce cloud (accelerator payment mock), sap commerce cloud \(accelerator payment mock\) +1 more SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an... CVE-2020-26811 5.3 MediumNovember 10, 2020
• sap commerce cloud SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing... CVE-2020-26809 5.3 MediumNovember 10, 2020
• sap commerce cloud SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that... CVE-2020-6363 4.6 MediumOctober 15, 2020
• sap commerce cloud SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs,... CVE-2020-6272 5.4 MediumOctober 15, 2020
• sap commerce SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL... CVE-2020-6302 6.4 MediumSeptember 9, 2020
• sap commerce SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under... CVE-2020-6264 8.6 HighJune 10, 2020
• sap commerce, sap se commerce (data hub), sap commerce data hub +2 more SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808... CVE-2020-6265 9.8 CriticalJune 9, 2020
• sap se commerce, sap commerce cloud +1 more SAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the... CVE-2020-6238 9.3 CriticalApril 14, 2020
• sap se commerce, sap commerce cloud +1 more SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an... CVE-2020-6232 5.3 MediumApril 14, 2020
• sap commerce cloud, sap se commerce cloud (testweb extension) +1 more The SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently... CVE-2020-6201 6.1 MediumMarch 10, 2020
• sap commerce cloud, sap se commerce cloud (smartedit extension) +1 more The SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulnerable to client... CVE-2020-6200 5.4 MediumMarch 10, 2020
• sap commerce cloud, sap se commerce cloud (virtualjdbc extension) +1 more Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6... CVE-2019-0344 In KEV 9.8 CriticalAugust 14, 2019
• sap commerce cloud, sap se commerce cloud (mediaconversion extension) +1 more SAP Commerce Cloud (Mediaconversion Extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905,... CVE-2019-0343 8.8 HighAugust 14, 2019
• sap commerce cloud, sap se commerce cloud (ex sap hybris commerce) (hy com) +1 more SAP Commerce Cloud (previously known as SAP Hybris Commerce), (HY_COM, versions 6.3, 6.4, 6.5, 6... CVE-2019-0322 7.5 HighJuly 10, 2019
• sap e-commerce, sap se e-commerce (business-to-consumer application) +1 more An authenticated attacker in SAP E-Commerce (Business-to-Consumer application), versions 7.3, 7... CVE-2019-0308 6.8 MediumJune 12, 2019
• sap e-commerce, sap se e-commerce (sap-crmjav, sap-crmweb, sap-shrweb, sap-shrjav, sap-crmapp, sap-shrapp) +1 more SAP E-Commerce (Business-to-Consumer) application does not sufficiently encode user-controlled... CVE-2019-0298 6.1 MediumMay 14, 2019
• sap hybris, commerce (sap hybris commerce) +1 more SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site... CVE-2018-2505 6.1 MediumDecember 11, 2018
• sap hybris, hybris commerce +1 more The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server... CVE-2018-2463 8.6 HighSeptember 11, 2018