<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: sap-se-sap-commerce</title><description>Every new CVE for sap-se-sap-commerce.</description><link>https://agentprime.io/</link><item><title>CVE-2025-24875: SameSite Defense in Depth not applied for some cookies in SAP Commerce</title><link>https://agentprime.io/advisories/CVE-2025-24875/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24875/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Feb 2025 00:37:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-41733: Information Disclosure Vulnerability in SAP Commerce</title><link>https://agentprime.io/advisories/CVE-2024-41733/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-41733/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Aug 2024 03:52:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-39597: [CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce</title><link>https://agentprime.io/advisories/CVE-2024-39597/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-39597/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jul 2024 03:48:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-39439: SAP Commerce accepts empty passphrases.</title><link>https://agentprime.io/advisories/CVE-2023-39439/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-39439/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Aug 2023 00:49:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-41204: Open redirect in SAP SE SAP Commerce</title><link>https://agentprime.io/advisories/CVE-2022-41204/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-41204/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Oct 2022 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-42064: SAP SE SAP Commerce: If configured to use an Oracle database and if a query is created using the flexible…</title><link>https://agentprime.io/advisories/CVE-2021-42064/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-42064/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Dec 2021 15:44:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-40502: Missing authorization in SAP SE SAP Commerce</title><link>https://agentprime.io/advisories/CVE-2021-40502/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-40502/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Nov 2021 15:24:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-27602: SAP SE SAP Commerce: SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011…</title><link>https://agentprime.io/advisories/CVE-2021-27602/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-27602/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Apr 2021 18:41:24 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2021-21477: SAP SE SAP Commerce: SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011…</title><link>https://agentprime.io/advisories/CVE-2021-21477/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-21477/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. CVSS score 9.9 (7.0 or more) and EPSS 0.30 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Feb 2021 20:43:57 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2020-6302: Session fixation in SAP SE SAP Commerce</title><link>https://agentprime.io/advisories/CVE-2020-6302/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-6302/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2020 12:52:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-6264: SAP SE SAP Commerce: SAP Commerce, versions - 6.7, 1808, 1811, 1905…</title><link>https://agentprime.io/advisories/CVE-2020-6264/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-6264/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Jun 2020 12:45:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-6265: Hard-coded credentials in SAP SE SAP Commerce and others</title><link>https://agentprime.io/advisories/CVE-2020-6265/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-6265/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jun 2020 18:24:14 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2020-6238: SAP SE SAP Commerce: SAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905…</title><link>https://agentprime.io/advisories/CVE-2020-6238/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-6238/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Apr 2020 18:39:02 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2020-6232: SAP SE SAP Commerce: SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an…</title><link>https://agentprime.io/advisories/CVE-2020-6232/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-6232/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Apr 2020 18:37:46 GMT</pubDate><category>CVE</category></item></channel></rss>