Known vulnerabilities in SAP Commerce 2205

Vendor: SAP
Software: SAP Commerce
Version: 2205
Software CPE: cpe:2.3:a:sap:sap_commerce:*:*:*:*:*:*:*:*
Website: https://www.sap.com/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SAP Commerce version 2205 SAP Commerce 2205 is affected by 3 vulnerabilities: 2 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103904 - Sensitive Cookie with Improper SameSite Attribute
CVE-2025-24875		 CWE-1275 Low
No
No
 - 12.02.2025 SB2025021256
#VU79268 - Exposure of sensitive information to an unauthorized actor
CVE-2023-37486		 CWE-200 Medium
No
No
 - 09.08.2023 SB2023080904
#VU79267 - Weak Password Requirements
CVE-2023-39439		 CWE-521 Medium
No
No
 - 09.08.2023 SB2023080904