Skip to content
OpenAdvisories

Product · SAP

SAP Commerce

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.2
    CVE-2024-39597

    [CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce

    In SAP Commerce, a user can misuse the forgotten password functionality to gain access to a Composable Storefront B2B site for which early login and registration is activated, without requiring the merchant to approve the account beforehand. If the site is no…

    SAP SAP Commerce
  • High 8.8
    CVE-2023-39439

    SAP Commerce accepts empty passphrases.

    SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.

    SAP SAP Commerce
  • High 8.8
    CVE-2022-41204

    An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a man…

    SAP SAP Commerce
  • High 8.6
    CVE-2020-6264

    SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under certain conditions wh…

    SAP SAP Commerce