Login Request a demo
CO
Product
Commerce
by Sap · last CVE Aug 13, 2024
10
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 4High 4Medium 2Low 0
Severity
All severities10Critical4High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Commerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-41204
8.8
1%
Oct 11
An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL
Affected: 1905; 2005; 2011; 2105; 2205
CVE-2021-40502
8.8
1%
Nov 10
SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges
Affected: 1905.34; 2005.18; 2011.13; 2105.3
CVE-2020-6302
8.1
1%
Sep 9
SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is loaded initially
Affected: 6.7; 1808; 1811; 1905; 2005
CVE-2020-6264
7.5
1%
Jun 10
SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under certain conditions which would otherwise be restricted, leading to Information…
Affected: 6.7; 1808; 1811; 1905
Showing 4