Exposure of SAP Commerce Cloud

Ecommerce

11

exposure score

2,221

sites use

0

exploited

0

critical

CVEs

12 results

CVE-2020-26809MEDIUMSAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission checks via the '/mediEPSS 2.0%CVE-2021-21445MEDIUMSAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP responEPSS 0.6%CVE-2021-33666MEDIUMWhen SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, coulEPSS 0.5%CVE-2020-6272MEDIUMSAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorizedEPSS 0.5%CVE-2020-6363—SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that maintain sessions with a user. These sessions aEPSS 0.5%CVE-2023-42481HIGHImproper Access Control vulnerability in SAP Commerce CloudEPSS 0.5%CVE-2024-33003HIGHInformation Disclosure Vulnerability in SAP Commerce CloudEPSS 0.5%CVE-2025-42906MEDIUMDirectory Traversal vulnerability in SAP Commerce CloudEPSS 0.4%CVE-2026-24321MEDIUMInformation Disclosure vulnerability in SAP Commerce CloudEPSS 0.2%CVE-2025-27435MEDIUMInformation Disclosure Vulnerability in SAP Commerce CloudEPSS 0.2%CVE-2024-47577LOWInformation Disclosure vulnerability in SAP Commerce CloudEPSS 0.2%CVE-2026-23684MEDIUMRace condition vulnerability in SAP Commerce CloudEPSS 0.2%

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →