CVE-2025-27435

Under specific conditions and prerequisites, an unauthenticated attacker could access customer coupon codes exposed in the URL parameters of the Coupon Campaign URL in SAP Commerce. This could allow the attacker to use the disclosed coupon code, hence posing a low impact on confidentiality and...

CVE-2025-27435

creationtimestamp| type| source ---|---|--- 2025-04-08 07:46:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10867 2025-04-08 09:18:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmc5ecpojo2z 2025-04-08 11:29:19+00:00| seen| https://t.me/cvedetector/22429...

CVE-2025-27435

CVE-2025-27435 affects SAP Commerce Cloud. The vulnerability is an information disclosure where a coupon code is exposed in the URL parameters of the Coupon Campaign URL, allowing an unauthenticated attacker to access and use the disclosed code. Impact is described as low for confidentiality and ...