SAP SE SAP Commerce Cloud (virtualjdbc extension) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting SAP SE SAP Commerce Cloud (virtualjdbc extension): 1 record(s), with affected versions and fixes.

CVE-2019-0344 Critical · 9.8 KEV High · 62 CWE-502 Aug 14, 2019

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.