<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>SAP Commerce Cloud Deserialization of Untrusted Data · updates</title>
  <link>https://pwn.watch/i/sap-commerce-cloud-cve-2019-0344</link>
  <description>SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection. Added to the CISA KEV catalog on 2024-09-30. CVE-2019-0344 was assigned before 2024; the KEV listing came in 2024.</description>
  <language>en</language>
  <lastBuildDate>Mon, 30 Sep 2024 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/i/sap-commerce-cloud-cve-2019-0344/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>SAP Commerce Cloud Deserialization of Untrusted Data: CISA added CVE-2019-0344 to the KEV catalog (federal deadline 2024-10-21)</title>
    <link>https://pwn.watch/i/sap-commerce-cloud-cve-2019-0344</link>
    <guid isPermaLink="false">https://pwn.watch/i/sap-commerce-cloud-cve-2019-0344#2024-09-30-0d73846b</guid>
    <pubDate>Mon, 30 Sep 2024 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.cisa.gov/known-exploited-vulnerabilities-catalog&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
