CVE-2021-40502

概要

参考情報

• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

commerce のその他の脆弱性

• CVE-2024-41733中 5.3In SAP Commerce, valid user accounts can be identified during the customer registration and login processes. This allows a potential attacke…
• CVE-2022-41204高 8.8An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They ca…
• CVE-2021-42064緊急 9.8If configured to use an Oracle database and if a query is created using the flexible search java api with a parameterized "in" clause, SAP C…
• CVE-2021-27619中 6.5SAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low privileged user to search for attributes which are n…
• CVE-2021-27602緊急 9.9SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which a…