CVE-2019-0322

SAP Commerce Cloud (previously known as SAP Hybris Commerce), (HY_COM, versions 6.3, 6.4, 6.5, 6.6, 6.7, 1808, 1811), allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.

Score

CVSS 3.0 7.5 High

Status

Modified - cna@sap.com

Published

2019-07-10

Last modified

2024-08-04

Affected products

• Commerce Cloud (Sap)
• Sap Commerce Cloud Ex Sap Hybris Commerce Hy Com (Sap Se)

References

• http://www.securityfocus.com/bid/109076
• https://launchpad.support.sap.com/#/notes/2781873
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575