CVE Intelligence

Vulnerabilidades do SAP SE SAP Commerce Cloud (virtualjdbc extension)

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam SAP SE SAP Commerce Cloud (virtualjdbc extension): 1 registro(s), com versões afetadas e correções.

CVE-2019-0344 Crítica · 9.8 KEV Alta · 62 CWE-502 14/08/2019
SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.