SAP Commerce Cloud (virtualjdbc extension) vulnerabilities

1 known vulnerability in SAP Commerce Cloud (virtualjdbc extension) from SAP. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  SAP Commerce Cloud Deserialization of Untrusted Data Exploited

  CVE-2019-0344Aug 14, 2019SAPEPSS 7.47%

  Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.