SAP_SE SAP Commerce
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-24875 | HY_COM 2205 ; COM_CLOUD 2211 | SameSite Defense in Depth not applied for some cookies in SAP Commerce | MEDIUM 6.8 | 0.2 % | ||
| CVE-2024-41733 | HY_COM 2205 ; COM_CLOUD 2211 | Information Disclosure Vulnerability in SAP Commerce | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-39597 | HY_COM 2205 ; COM_CLOUD 2211 | [CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce | HIGH 7.2 | 0.3 % | ||
| CVE-2023-39439 | HY_COM 2105 ; HY_COM 2205 ; COM_CLOUD 2211 | SAP Commerce accepts empty passphrases. | CRITICAL 9.8 | 0.7 % |