| Package | Affected versions | Patched versions |
|---|---|---|
| commerce backoffice | = 2205= 2211 |
SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free