Skip to content
Sap Commerce Cloud vulnerabilities
-
sap commerce cloud
Information Disclosure vulnerability in SAP Commerce Cloud
CVE-2026-24321
5.3 Medium
-
sap commerce cloud
Race condition vulnerability in SAP Commerce Cloud
CVE-2026-23684
5.9 Medium
-
sap commerce, commerce cloud, commerce hycom +2 more
Information Disclosure Vulnerability in SAP Commerce
CVE-2024-41733
5.3 Medium
-
sap commerce cloud
Information Disclosure Vulnerability in SAP Commerce Cloud
CVE-2024-33003
7.4 High
-
sap se commerce, sap commerce cloud, commerce hycom +2 more
[CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce
CVE-2024-39597
7.2 High
-
sap commerce cloud
Improper Access Control vulnerability in SAP Commerce Cloud
CVE-2023-42481
8.1 High
-
sap se commerce (occ api), sap commerce cloud, commerce hycom +2 more
Information Disclosure vulnerability in SAP Commerce (OCC API)
CVE-2023-37486
5.9 Medium
-
sap commerce cloud, sap se commerce, sap commerce hycom +2 more
SAP Commerce accepts empty passphrases.
CVE-2023-39439
8.8 High
-
sap commerce cloud
When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME...
CVE-2021-33666
4.7 Medium
-
sap commerce cloud
SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to...
CVE-2021-21445
5.4 Medium
-
sap se commerce cloud (accelerator payment mock), sap commerce cloud \(accelerator payment mock\) +1 more
SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an...
CVE-2020-26810
7.5 High
-
sap se commerce cloud (accelerator payment mock), sap commerce cloud \(accelerator payment mock\) +1 more
SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an...
CVE-2020-26811
5.3 Medium
-
sap commerce cloud
SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing...
CVE-2020-26809
5.3 Medium
-
sap commerce cloud
SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that...
CVE-2020-6363
4.6 Medium
-
sap commerce cloud
SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs,...
CVE-2020-6272
5.4 Medium
-
sap se commerce, sap commerce cloud +1 more
SAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the...
CVE-2020-6238
9.3 Critical
-
sap se commerce, sap commerce cloud +1 more
SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an...
CVE-2020-6232
5.3 Medium
-
sap commerce cloud, sap se commerce cloud (testweb extension) +1 more
The SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently...
CVE-2020-6201
6.1 Medium
-
sap commerce cloud, sap se commerce cloud (smartedit extension) +1 more
The SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulnerable to client...
CVE-2020-6200
5.4 Medium
-
sap commerce cloud, sap se commerce cloud (virtualjdbc extension) +1 more
Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6...
CVE-2019-0344
In KEV
9.8 Critical
-
sap commerce cloud, sap se commerce cloud (mediaconversion extension) +1 more
SAP Commerce Cloud (Mediaconversion Extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905,...
CVE-2019-0343
8.8 High
-
sap commerce cloud, sap se commerce cloud (ex sap hybris commerce) (hy com) +1 more
SAP Commerce Cloud (previously known as SAP Hybris Commerce), (HY_COM, versions 6.3, 6.4, 6.5, 6...
CVE-2019-0322
7.5 High