Exploited Vulnerabilities DailyCVE-2019-0344: SAP Commerce Cloud
EPSS7.0%No. 1351 of 1739 in KEV
CVE year2019~5 yrs before listing
Same vendor in KEV14
Same product1
| Field | Value |
|---|---|
| Vendor | SAP |
| Product | Commerce Cloud |
| Name | SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability |
| Added to KEV | 2024-09-30 |
| US federal due date | 2024-10-21 |
| Ransomware use | Unknown |
| CWE | CWE-502 |
CISA description
SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A SAP Commerce Cloud vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2024-09-30.