Vendor/product archive

sap / commerce_hycom CVEs

Beta · best-effort

2 CVEs tagged to sap / commerce_hycom — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to sap vendor archive

CVE-2023-39439

Published Aug 8, 2023

SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2023-37486

Published Aug 8, 2023

Under certain conditions SAP Commerce (OCC API) - versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211, endpoints allow an attacker to access information which would otherwise be res…

CVSS 5.9 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1