EUVD-2021-29050

Malicious code in bioql PyPI...

CVE-2021-42064

If configured to use an Oracle database and if a query is created using the flexible search java api with a parameterized "in" clause, SAP Commerce - versions 1905, 2005, 2105, 2011, allows attacker to execute crafted database queries, exposing backend database. The vulnerability is present if th...

CVE-2021-42064

SAP Commerce (versions 1905, 2005, 2105, 2011) is vulnerable when configured to use Oracle DB and a query is built with the Flexible Search Java API using a parameterized IN clause that accepts more than 1000 values. The root cause is not explicitly described beyond this parameterized IN clause b...

PT-2021-23498

Name of the Vulnerable Software and Affected Versions SAP Commerce versions 1905, 2005, 2105, 2011 Description The issue allows an attacker to execute crafted database queries, exposing the backend database, if the system is configured to use an Oracle database and a query is created using the...

CVE-2021-42064: Improper Neutralization of Special Elements used in an SQL Command

If configured to use an Oracle database and if a query is created using the flexible search java api with a parameterized "in" clause, SAP Commerce - versions 1905, 2005, 2105, 2011, allows attacker to execute crafted database queries, exposing backend database. The vulnerability is present if th...