CC
Product
Commerce Cloud
On CISA KEVExploited in the wild
18
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 10Low 0
Watch
Add Commerce Cloud to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-0343 | 8.8 | Aug 14 | SAP Commerce Cloud (Mediaconversion Extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, allows an authenticated Backoffice/HMC user to inject code that can be executed by… Affected: 6.4; 6.5; 6.6; 6.7; 1808; 1811; +1 more |
| CVE-2023-42481 | 8.1 | Dec 12 | In SAP Commerce Cloud - versions HY_COM 1905, HY_COM 2005, HY_COM2105, HY_COM 2011, HY_COM 2205, COM_CLOUD 2211, a locked B2B user can misuse the forgotten password functionality… Affected: 8.1 |
| CVE-2023-37486 | 7.5 | Aug 8 | Under certain conditions SAP Commerce (OCC API) - versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211, endpoints allow an attacker to access information which would otherwise be… Affected: 2211 |
| CVE-2019-0322 | 7.5 | Jul 10 | SAP Commerce Cloud (previously known as SAP Hybris Commerce), (HY_COM, versions 6.3, 6.4, 6.5, 6.6, 6.7, 1808, 1811), allows an attacker to prevent legitimate users from accessing… Affected: 6.3; 6.4; 6.5; 6.6; 6.7; 1808; +1 more |
Showing 4