CVE-2026-44761Critical 9.1Insecure Sample Credentials in SAP Commerce Cloud0.5%
CVE-2026-24321Medium 5.3Information Disclosure vulnerability in SAP Commerce Cloud0.3%
CVE-2026-23684Medium 5.9Race condition vulnerability in SAP Commerce Cloud0.2%
CVE-2025-42906Medium 5.3Directory Traversal vulnerability in SAP Commerce Cloud0.4%
CVE-2025-27435Medium 4.2Information Disclosure Vulnerability in SAP Commerce Cloud0.2%
CVE-2024-47577Low 2.7Information Disclosure vulnerability in SAP Commerce Cloud0.2%
CVE-2024-33003High 7.4Information Disclosure Vulnerability in SAP Commerce Cloud0.5%
CVE-2023-42481High 8.1Improper Access Control vulnerability in SAP Commerce Cloud0.5%
CVE-2021-33666Medium 4.7When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, could be used to facilitate an XSS attack or malware proliferati0.5%
CVE-2021-21445Medium 5.4SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, an0.6%
CVE-2020-26809Medium 5.3SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission checks via the '/medias' endpoint hence gaining access to Secure Media folders. T2.1%
CVE-2020-6363UnratedSAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that maintain sessions with a user. These sessions are established after the user has authenticated with usernam0.5%
CVE-2020-6272Medium 5.4SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorized content manager to inject malicious script into several web0.5%