Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 11:42 p.m.1 views

CVE-2022-41204

An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows them to steal credentials and hijack...

8.8CVSS8.7AI score0.00418EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/05/11 12:0 a.m.2 views

SAP Commerce 安全漏洞

SAP Commerce is a set of cloud-based e-commerce platform from Germany's SAP. This product supports sales management, marketing management, order management and operations management. An information disclosure vulnerability exists in SAP Commerce versions 1808, 1811, 1905, 2005, and 2011. An...

6.5CVSS5.6AI score0.00184EPSS
Exploits0References3
CNVD
CNVD
added 2020/11/11 12:0 a.m.1 views

SAP Commerce Cloud Denial of Service Vulnerability

SAP Commerce Cloud is a cloud-native omnichannel commerce solution for B2B, B2C and B2B2C companies. A denial of service vulnerability exists in SAP Commerce Cloud 1808, 1811, 1905, 2005. An attacker could exploit this vulnerability by submitting a specially crafted request to a specific SAP...

7.5CVSS6.7AI score0.01178EPSS
Exploits0References1
OSV
OSV
added 2020/11/10 5:15 p.m.0 views

CVE-2020-26810

SAP Commerce Cloud Accelerator Payment Mock, versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to submit a crafted request over a network to a particular SAP Commerce module URL which will be processed without further interaction, the crafted request can render the SAP Commerc...

7.5CVSS7.1AI score0.01178EPSS
Exploits0References2
Prion
Prion
added 2020/10/15 2:15 a.m.24 views

Session fixation

SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that maintain sessions with a user. These sessions are established after the user has authenticated with username/passphrase credentials. The user can change their own passphrase, but this does not invalidate...

4.9CVSS4.7AI score0.0021EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/07/17 12:0 a.m.13 views

Schneider Electric SCADA Expert ClearSCADA 2005 / 2007 / 2009 < 2009 R2.4 / 2010 < 2010 R1.1 Remote Authentication Bypass

Binary data 8610.prm...

7.3AI score
Exploits0References2
securityvulns
securityvulns
added 2005/11/02 12:0 a.m.32 views

[SA17383] Ringtail CaseBook Cross-Site Scripting and Username Enumeration

TITLE: Ringtail CaseBook Cross-Site Scripting and Username Enumeration SECUNIA ADVISORY ID: SA17383 VERIFY ADVISORY: http://secunia.com/advisories/17383/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: Ringtail CaseBook 6.x...

0.1AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.6 views

VS 2005 - VS - STD, PRO, Team SKUs - CHS.SP0

...

1.2AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.12 views

VS 2005 - VNS - EXP - ENU,JPN,KOR,CHS,CHT,DEU,FRA,ITA,ESN.SP0

...

0.7AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 1970/01/01 12:0 a.m.5 views

VS 2005 - VS - STD, PRO, Team SKUs - FRA.SP0

...

1.2AI score
Exploits0
Rows per page
Query Builder