Diterjemahkan oleh mesin; mungkin terdapat kesilapan. (Machine-translated; may contain errors.) Baca versi bahasa Inggeris (Read in English)
SAP Commerce Cloud
18 nota sejak Januari 2023.
Keutamaan diterbitkan daripada CVSS, bukan keutamaan SAP: CVSS 9.0 atau lebih ialah Kritikal, 7.0 atau lebih Tinggi, 4.0 atau lebih Sederhana, bawah 4.0 Rendah. Keutamaan SAP sendiri hanya terdapat di SAP for Me (log masuk SAP diperlukan).
| Hari Tampalan | Nota | Tajuk | Keutamaan (diterbitkan daripada CVSS, bukan keutamaan SAP) | CVSS |
|---|---|---|---|---|
| Oktober 2026 | 3800517 | SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code) | Tinggi | 8.8 |
| Ogos 2026 | 3771065 | Improper Authorization in SAP Commerce Cloud (Data Hub Adapter) | Kritikal | 10.0 |
| Julai 2026 | 3753495 | Insecure Sample Credentials in SAP Commerce Cloud | Kritikal | 9.1 |
| Februari 2026 | 3689543 | Race condition vulnerability in SAP Commerce Cloud | Sederhana | 5.9 |
| Februari 2026 | 3687771 | Information Disclosure vulnerability in SAP Commerce Cloud | Sederhana | 5.3 |
| Oktober 2025 | 3634724 | Directory Traversal vulnerability in SAP Commerce Cloud | Sederhana | 5.3 |
| April 2025 | 3543274 | Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud) | Sederhana | 6.8 |
| April 2025 | 3539465 | Information Disclosure Vulnerability in SAP Commerce Cloud | Sederhana | 4.2 |
| Mac 2025 | 3569602 | Cross-Site Scripting (XSS) vulnerability in SAP Commerce (Swagger UI) | Tinggi | 8.8 |
| Februari 2025 | 3555364 | SameSite Defense in Depth not applied for some cookies in SAP Commerce | Sederhana | 6.8 |
| Februari 2025 | 3559510 | Missing Defense in Depth Against Clickjacking in SAP Commerce Backoffice | Sederhana | 6.8 |
| Disember 2024 | 3535451 | Information Disclosure vulnerability in SAP Commerce Cloud | Rendah | 2.7 |
| Ogos 2024 | 3459935 | Information Disclosure Vulnerability in SAP Commerce Cloud | Tinggi | 7.4 |
| Ogos 2024 | 3471450 | Information Disclosure Vulnerability in SAP Commerce | Sederhana | 5.3 |
| Julai 2024 | 3490515 | Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce | Tinggi | 7.2 |
| Disember 2023 | 3394567 | Improper Access Control vulnerability in SAP Commerce Cloud | Tinggi | 8.1 |
| Ogos 2023 | 3346500 | SAP Commerce accepts empty passphrases. | Tinggi | 8.8 |
| Ogos 2023 | 3341934 | Information Disclosure vulnerability in SAP Commerce (OCC API) | Sederhana | 5.9 |