Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Sap Subscribe
Filtered by product Commerce Webservices 2.0
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-41266 1 Sap 1 Commerce Webservices 2.0 2022-12-15 N/A 6.1 MEDIUM
Due to a lack of proper input validation, SAP Commerce Webservices 2.0 (Swagger UI) - versions 1905, 2005, 2105, 2011, 2205, allows malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a DOM Cross-Site Scripting (XSS) attack. As a result, an attacker may be able to steal user tokens and achieve a full account takeover including access to administrative tools in SAP Commerce.