HIGH🇬🇧 English

CVE-2019-0343

CVSS 8.8v3.0pub. 2019-08-14upd. 2024-11-21

SAP Commerce Cloud (Mediaconversion Extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, allows an authenticated Backoffice/HMC user to inject code that can be executed by the application, leading to Code Injection. An attacker could thereby control the behavior of the application.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Sap Commerce Cloud

    APP
    Sap
    1808181119056.46.56.66.7
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2019-0344CRITICAL9.8⚠ KEVPL ✓ten sam produkt

RCE przez niebezpieczną deserializację w SAP Commerce Cloud (virtualjdbc)

CVE-2020-6238CRITICAL9.3PL ✓ten sam produkt

SAP Commerce Cloud — brak walidacji XML w REST API (XXE)

CVE-2024-33003HIGH7.4ten sam produkt

Some OCC API endpoints in SAP Commerce Cloud allows Personally Identifiable Information (PII) data, such as pa...

CVE-2023-42481HIGH8.1ten sam produkt

In SAP Commerce Cloud - versions HY_COM 1905, HY_COM 2005, HY_COM2105, HY_COM 2011, HY_COM 2205, COM_CLOUD 221...

CVE-2023-39439HIGH8.8ten sam produkt

SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to...