Skip to contentSap Se Commerce vulnerabilities
- sap se commerce cloud (ootb code)SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)CVE-2026-891138.8 High
- sap se commerce cloud (data hub adapter)Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)CVE-2026-58231Public exploit10.0 Critical
- sap se commerce cloudInsecure Sample Credentials in SAP Commerce CloudCVE-2026-447619.1 Critical
- sap se commerce cloud configurationMissing authentication check in SAP Commerce cloud configurationCVE-2026-342639.6 Critical
- sap commerce cloudInformation Disclosure vulnerability in SAP Commerce CloudCVE-2026-243215.3 Medium
- sap commerce cloudRace condition vulnerability in SAP Commerce CloudCVE-2026-236845.9 Medium
- sap se commerce cloudDirectory Traversal vulnerability in SAP Commerce CloudCVE-2025-429065.3 Medium
- sap se commerce cloudInformation Disclosure Vulnerability in SAP Commerce CloudCVE-2025-274354.2 Medium
- sap se commerce cloud (public cloud)Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud)CVE-2025-266546.8 Medium
- sap se commerce (swagger ui)Cross-Site Scripting (XSS) vulnerability in SAP Commerce (Swagger UI)CVE-2025-274348.8 High
- sap se commerceSameSite Defense in Depth not applied for some cookies in SAP CommerceCVE-2025-248756.8 Medium
- sap se commerce (backoffice)Missing Defense in Depth Against Clickjacking in SAP Commerce BackofficeCVE-2025-248746.8 Medium
- sap se commerce cloudInformation Disclosure vulnerability in SAP Commerce CloudCVE-2024-475772.7 Low
- sap commerce backofficeCross-Site Scripting (XSS) vulnerability in SAP Commerce BackofficeCVE-2024-452785.4 Medium
- sap commerce, commerce cloud, commerce hycom +2 moreInformation Disclosure Vulnerability in SAP CommerceCVE-2024-417335.3 Medium
- sap commerce backofficeCross-Site Scripting (XSS) vulnerability in SAP Commerce BackofficeCVE-2024-417355.4 Medium
- sap commerce cloudInformation Disclosure Vulnerability in SAP Commerce CloudCVE-2024-330037.4 High
- sap se commerce, sap commerce cloud, commerce hycom +2 more[CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP CommerceCVE-2024-395977.2 High
- sap commerce cloudImproper Access Control vulnerability in SAP Commerce CloudCVE-2023-424818.1 High
- sap se commerce (occ api), sap commerce cloud, commerce hycom +2 moreInformation Disclosure vulnerability in SAP Commerce (OCC API)CVE-2023-374865.9 Medium
- sap commerce cloud, sap se commerce, sap commerce hycom +2 moreSAP Commerce accepts empty passphrases.CVE-2023-394398.8 High
- sap commerceAn attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205,...CVE-2022-412048.8 High
- sap commerceIf configured to use an Oracle database and if a query is created using the flexible search java...CVE-2021-420649.8 Critical
- sap commerceSAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary...CVE-2021-405028.8 High
- sap commerce cloudWhen SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME...CVE-2021-336664.7 Medium
- sap commerceSAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain...CVE-2021-276029.9 Critical
- sap commerceSAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required...CVE-2021-21477EPSS 29.8%9.9 Critical
- sap commerce cloudSAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to...CVE-2021-214455.4 Medium
- sap commerce cloudSAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing...CVE-2020-268095.3 Medium
- sap commerce cloudSAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that...CVE-2020-63634.6 Medium
- sap commerce cloudSAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs,...CVE-2020-62725.4 Medium
- sap commerceSAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL...CVE-2020-63026.4 Medium
- sap commerceSAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under...CVE-2020-62648.6 High
- sap commerce, sap se commerce (data hub), sap commerce data hub +2 moreSAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808...CVE-2020-62659.8 Critical
- sap se commerce, sap commerce cloud +1 moreSAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the...CVE-2020-62389.3 Critical
- sap se commerce, sap commerce cloud +1 moreSAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an...CVE-2020-62325.3 Medium