Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

SAP Commerce

Security incidents tagged SAP Commerce. Newest first.

0 SAP Commerce incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
0
Patched
1
Days without an incident
752
Longest quiet run: 753 days (Oct 1–Oct 23)
Show 1 older incident

September 2024 1

  • PatchedSAP Commerce Cloud Deserialization of Untrusted Data

    SAP Commerce Cloud

    SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection. Added to the CISA KEV catalog on 2024-09-30. CVE-2019-0344 was assigned before 2024; the KEV listing came in 2024.

    Open incident →CVE-2019-0344