Commerce Hycom (Sap) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-08-13. Vendor: Sap.

CVEs of Commerce Hycom

• CVE-2024-41733 - CVSS 5.3 (medium), 2024-08-13: In SAP Commerce, valid user accounts can be identified during the customer registration and login processes. This allows a potential attacker to learn if a…
• CVE-2024-39597 - CVSS 7.2 (high), 2024-07-09: In SAP Commerce, a user can misuse the forgotten password functionality to gain access to a Composable Storefront B2B site for which early login and…
• CVE-2023-39439 - CVSS 9.8 (critical), 2023-08-08: SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.
• CVE-2023-37486 - CVSS 7.5 (high), 2023-08-08: Under certain conditions SAP Commerce (OCC API) - versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211, endpoints allow an attacker to access information which…