ACTIEF MISBRUIKT
CVE-2019-0344: SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
| Leverancier | SAP |
|---|---|
| Product | Commerce Cloud |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 30 sep 2024 |
| CISA-deadline (Amerikaanse overheid) | 21 okt 2024 |
| Zwakte (CWE) | CWE-502 |
Vereiste actie (tekst van CISA, Engels)
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Beschrijving (NVD, Engels)
SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.
BRONNEN
Andere lekken bij SAP
- CVE-2025-42999: SAP NetWeaver Deserialization Vulnerability
- CVE-2025-31324: SAP NetWeaver Unrestricted File Upload Vulnerability
- CVE-2017-12637: SAP NetWeaver Directory Traversal Vulnerability
- CVE-2022-22536: SAP Multiple Products HTTP Request Smuggling Vulnerability
- CVE-2021-38163: SAP NetWeaver Unrestricted File Upload Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.