SAP_SE SAP Commerce Cloud vulnerabilities

23 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Exploited SAP_SE SAP Commerce Cloud vulnerabilities

CVE-2019-0344 — SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

CVE-2026-44761 — Insecure Sample Credentials in SAP Commerce Cloud (CVSS 9.1)
CVE-2026-24321 — Information Disclosure vulnerability in SAP Commerce Cloud (CVSS 5.3)
CVE-2026-23684 — Race condition vulnerability in SAP Commerce Cloud (CVSS 5.9)
CVE-2025-42906 — Directory Traversal vulnerability in SAP Commerce Cloud (CVSS 5.3)
CVE-2025-27435 — Information Disclosure Vulnerability in SAP Commerce Cloud (CVSS 4.2)
CVE-2024-47577 — Information Disclosure vulnerability in SAP Commerce Cloud (CVSS 2.7)
CVE-2024-33003 — Information Disclosure Vulnerability in SAP Commerce Cloud (CVSS 9.1)
CVE-2024-39597 — [CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce (CVSS 7.2)
CVE-2023-42481 — Improper Access Control vulnerability in SAP Commerce Cloud (CVSS 8.1)
CVE-2023-39439 — SAP Commerce accepts empty passphrases. (CVSS 9.8)
CVE-2023-37486 — Information Disclosure vulnerability in SAP Commerce (OCC API) (CVSS 7.5)
CVE-2021-33666 — (CVSS 6.1)
CVE-2021-21445 — (CVSS 5.4)
CVE-2020-26809 — (CVSS 5.3)
CVE-2020-6363 — (CVSS 4.6)
CVE-2020-6272 — (CVSS 5.4)
CVE-2020-6238 — (CVSS 9.3)
CVE-2020-6232 — (CVSS 5.3)
CVE-2020-6201 — (CVSS 6.1)
CVE-2020-6200 — (CVSS 5.4)
CVE-2019-0344 — SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability (CVSS 9.8) — exploited
CVE-2019-0343 — (CVSS 8.8)
CVE-2019-0322 — (CVSS 7.5)