SAP SE SAP Commerce cloud configuration vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SAP SE SAP Commerce cloud configuration: 1 record(s), with affected versions and fixes.
CVE-2026-34263
Critical · 9.6
CWE-459 May 12, 2026
SAP Commerce Cloud Spring Security Misconfiguration Leading to Code Injection
Due to improper Spring Security configuration, SAP Commerce Cloud allows an unauthenticated user to perform malicious input injection, resulting in arbitrary server-side code execution, leading to high impact on Confidentiality, Integrity, and Availability of the application.