SAP Commerce Cloud 路径遍历漏洞

SAP Commerce Cloud is a cloud-based e-commerce platform from Germany's SAP. It supports sales management, marketing management, order management and operations management. A path traversal vulnerability exists in SAP Commerce Cloud, which stems from the presence of a path traversal vulnerability...

EUVD-2020-19345

Malware in sbrugna...

EUVD-2021-20343

Malware in sbrugna...

EUVD-2019-1116

Malware in sbrugna...

EUVD-2020-19346

Malware in sbrugna...

EUVD-2020-27422

Malware in sbrugna...

EUVD-2020-27513

Malware in sbrugna...

EUVD-2020-19347

Malware in sbrugna...

EUVD-2019-1095

Malware in sbrugna...

EUVD-2021-8719

Malicious code in bioql PyPI...

EUVD-2025-10106

Malicious code in bioql PyPI...

EUVD-2024-30748

Malicious code in bioql PyPI...

EUVD-2023-43163

Malicious code in bioql PyPI...

EUVD-2021-8751

Malicious code in bioql PyPI...

EUVD-2024-42809

Malicious code in bioql PyPI...

CVE-2023-39439

SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase...

CVE-2023-42481

In SAP Commerce Cloud - versions HYCOM 1905, HYCOM 2005, HYCOM2105, HYCOM 2011, HYCOM 2205, COMCLOUD 2211, a locked B2B user can misuse the forgotten password functionality to un-block his user account again and re-gain access if SAP Commerce Cloud - Composable Storefront is used as storefront, d...

CVE-2021-21477

SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools rules, an authenticated attacker with this privilege will be able to inject malicious code in the drools rules which when executed leads to Remote Code Execution vulnerability...

CVE-2021-21445

SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, and sent to a Web user. A successful exploitation of this vulnerability may lead to advanced attack...

CVE-2020-6363

SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that maintain sessions with a user. These sessions are established after the user has authenticated with username/passphrase credentials. The user can change their own passphrase, but this does not invalidate...