Known vulnerabilities in SAP Commerce 2211
Vendor:
SAP
Software:
SAP Commerce
Version:
2211
Software CPE:
cpe:2.3:a:sap:sap_commerce:*:*:*:*:*:*:*:*
Website:
https://www.sap.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Vulnerabilities by Severity
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105492 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-27434 |
CWE-79 | Low | - | 11.03.2025 |
SB2025031113 |
||
| #VU103904 - Sensitive Cookie with Improper SameSite Attribute CVE-2025-24875 |
CWE-1275 | Low | - | 12.02.2025 |
SB2025021256 |
||
| #VU79268 - Exposure of sensitive information to an unauthorized actor CVE-2023-37486 |
CWE-200 | Medium | - | 09.08.2023 |
SB2023080904 |
||
| #VU79267 - Weak Password Requirements CVE-2023-39439 |
CWE-521 | Medium | - | 09.08.2023 |
SB2023080904 |