CO
Product
Commerce
10
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 2Low 0
Watch
Add Commerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-27602 | 9.9 | Apr 13 | SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which are translated to drools rule when… Affected: 1808; 1811; 1905; 2005; 2011 |
| CVE-2021-21477 | 9.9 | Feb 9 | SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools rules, an authenticated attacker with this privilege will be… Affected: 1808; 1811; 1905; 2005; 2011 |
| CVE-2021-42064 | 9.8 | Dec 14 | If configured to use an Oracle database and if a query is created using the flexible search java api with a parameterized "in" clause, SAP Commerce - versions 1905, 2005, 2105,… Affected: 1905; 2005; 2011; 2105 |
| CVE-2020-6265 | 9.8 | Jun 9 | SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication and/or authorization… Affected: 6.7; 1808; 1811; 1905 |
Showing 4