CVE-2021-42064

概要

参考情報

• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 · Vendor Advisory

commerce のその他の脆弱性

• CVE-2024-41733中 5.3In SAP Commerce, valid user accounts can be identified during the customer registration and login processes. This allows a potential attacke…
• CVE-2022-41204高 8.8An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They ca…
• CVE-2021-40502高 8.8SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, result…
• CVE-2021-27619中 6.5SAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low privileged user to search for attributes which are n…
• CVE-2021-27602緊急 9.9SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which a…