CVE-2021-40502CWE-862

CVE-2021-40502: vulnerability in SAP Commerce

Published · Updated

Follow this CVE+ Monitor SAP Commerce

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Authenticated attackers will be able to access and edit data from b2b units they do not belong to.
Affected products
SAP SE · SAP Commerce
Related CVEs — SAP Commerce

In the same product, most dangerous first.

CVE-2021-21477CRITICALCVE-2021-21477EPSS 29.8%CVE-2021-27602CRITICALCVE-2021-27602EPSS 2.1%CVE-2020-6265CRITICALCVE-2020-6265EPSS 1.4%CVE-2020-6238CRITICALCVE-2020-6238EPSS 1.3%CVE-2021-42064—CVE-2021-42064EPSS 1.1%CVE-2020-6264HIGHCVE-2020-6264EPSS 1.0%