CVE-2020-6232

概要

参考情報

• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

commerce cloud のその他の脆弱性

• CVE-2026-24321中 5.3SAP Commerce Cloud exposes multiple API endpoints to unauthenticated users, allowing them to submit requests to these open endpoints to retr…
• CVE-2026-23684中 5.9A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in …
• CVE-2024-33003緊急 9.1Some OCC API endpoints in SAP Commerce Cloud allows Personally Identifiable Information (PII) data, such as passwords, email addresses, mobi…
• CVE-2023-42481高 8.1In SAP Commerce Cloud - versions HY_COM 1905, HY_COM 2005, HY_COM2105, HY_COM 2011, HY_COM 2205, COM_CLOUD 2211, a locked B2B user can misus…
• CVE-2023-39439緊急 9.8SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a…