Known vulnerabilities in SAP Commerce Cloud 2205

Known vulnerabilities in SAP Commerce Cloud 2205

Vendor: SAP

Software: SAP Commerce Cloud

Version: 2205

Software CPE: cpe:2.3:a:sap:sap_commerce_cloud:*:*:*:*:*:*:*:*

Website: https://www.sap.com/

Total vulnerabilities: 8

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU114316 - Resource exhaustion CVE-2025-5115	CWE-400	Medium	No	No	-	21.08.2025	SB2025082101 SB2025082751 SB20250828111 and 42 more
#VU100588 - Improper Authentication CVE-2024-52316	CWE-287	Low	No	No	-	18.11.2024	SB2024111823 SB2024112550 SB2024112832 and 36 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819	CWE-22	Medium	Public exploit available	No	-	17.10.2024	SB2024101781 SB2024112849 SB2024120331 and 54 more
#VU98795 - Security Features CVE-2024-38820	CWE-254	Medium	No	No	-	17.10.2024	SB2024101781 SB2024112618 SB2024120428 and 40 more
#VU98527 - Insufficient Verification of Data Authenticity CVE-2024-45217	CWE-345	Medium	No	No	-	15.10.2024	SB2024101504 SB2024121856 SB2025021263 and 1 more
#VU98526 - Improper Authentication CVE-2024-45216	CWE-287	Medium	Public exploit available	No	-	15.10.2024	SB2024101504 SB2024121856 SB2025021263 and 1 more
#VU97652 - Resource exhaustion CVE-2024-38286	CWE-400	Medium	No	No	-	23.09.2024	SB2024092355 SB2024100267 SB2024102808 and 26 more
#VU95819 - Exposure of sensitive information to an unauthorized actor CVE-2024-33003	CWE-200	Medium	No	No	-	13.08.2024	SB2024081348