Known vulnerabilities in SAP Commerce

Known vulnerabilities in SAP Commerce

Vendor: SAP

Software: SAP Commerce

Software CPE: cpe:2.3:a:sap:sap_commerce:*:*:*:*:*:*:*:*

Website: https://www.sap.com/

Total vulnerabilities: 10

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU105492 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-27434	CWE-79	Low	No	No	-	11.03.2025	SB2025031113
#VU103904 - Sensitive Cookie with Improper SameSite Attribute CVE-2025-24875	CWE-1275	Low	No	No	-	12.02.2025	SB2025021256
#VU79268 - Exposure of sensitive information to an unauthorized actor CVE-2023-37486	CWE-200	Medium	No	No	-	09.08.2023	SB2023080904
#VU79267 - Weak Password Requirements CVE-2023-39439	CWE-521	Medium	No	No	-	09.08.2023	SB2023080904
#VU58015 - Improper Authorization CVE-2021-40502	CWE-285	Medium	No	No	-	09.11.2021	SB2021110902
#VU53065 - Exposure of sensitive information to an unauthorized actor CVE-2021-27619	CWE-200	Low	No	No	-	11.05.2021	SB2021051106
#VU50446 - Improper input validation CVE-2021-21477	CWE-20	High	No	No	-	09.02.2021	SB2021020913
#VU47716 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-6272	CWE-79	Low	No	No	-	15.10.2020	SB2020091107
#VU47717 - Session Fixation CVE-2020-6363	CWE-384	Low	No	No	-	15.10.2020	SB2020091107
#VU46639 - Session Fixation CVE-2020-6302	CWE-384	Low	No	No	-	11.09.2020	SB2020091107