Advisories · Technology

SAP_SE SAP Commerce.

Every CVE that names SAP_SE SAP Commerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-24875 CVE record

CVSS 6.8 Medium

SameSite Defense in Depth not applied for some cookies in SAP Commerce
- SAP_SE SAP Commerce
- Cross-site request forgery (CSRF)
Not analysed yet 11 Feb 2025
CVE-2024-41733 CVE record

CVSS 5.3 Medium

Information Disclosure Vulnerability in SAP Commerce
- SAP_SE SAP Commerce
- Information disclosure
Not analysed yet 13 Aug 2024
CVE-2024-39597 CVE record

CVSS 7.2 High

[CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce
- SAP_SE SAP Commerce
- Broken access control
Not analysed yet 9 Jul 2024
CVE-2023-39439 CVE record

CVSS 8.8 High

SAP Commerce accepts empty passphrases.
- SAP_SE SAP Commerce
- CWE-258
Not analysed yet 8 Aug 2023
CVE-2022-41204 CVE record

CVSS 8.8 High

Open redirect in SAP SE SAP Commerce
- SAP SE SAP Commerce
- Open redirect
Not analysed yet 11 Oct 2022
CVE-2021-42064 CVE record

SAP SE SAP Commerce: If configured to use an Oracle database and if a query is created using the flexible…
- SAP SE SAP Commerce
Not analysed yet 14 Dec 2021
CVE-2021-40502 CVE record

Missing authorization in SAP SE SAP Commerce
- SAP SE SAP Commerce
- Broken access control
Not analysed yet 10 Nov 2021
CVE-2021-27602 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

SAP SE SAP Commerce: SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011…
- SAP SE SAP Commerce
Not analysed yet 13 Apr 2021
CVE-2021-21477 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SAP SE SAP Commerce: SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011…
- SAP SE SAP Commerce
Not analysed yet 9 Feb 2021
CVE-2020-6302 CVE record

CVSS 6.4 Medium

Session fixation in SAP SE SAP Commerce
- SAP SE SAP Commerce
- Authentication bypass
Not analysed yet 9 Sept 2020
CVE-2020-6264 CVE record

CVSS 8.6 High

SAP SE SAP Commerce: SAP Commerce, versions - 6.7, 1808, 1811, 1905…
- SAP SE SAP Commerce
Not analysed yet 10 Jun 2020
CVE-2020-6265 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Hard-coded credentials in SAP SE SAP Commerce and others
- SAP SE SAP Commerce
- SAP SE SAP Commerce (Data Hub)
- Hard-coded credentials
Not analysed yet 9 Jun 2020
CVE-2020-6238 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

SAP SE SAP Commerce: SAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905…
- SAP SE SAP Commerce
Not analysed yet 14 Apr 2020
CVE-2020-6232 CVE record

CVSS 5.3 Medium

SAP SE SAP Commerce: SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an…
- SAP SE SAP Commerce
Not analysed yet 14 Apr 2020