SAP Commerce Cloud
39 notes since January 2023.
| Patch Day | Note | Title | Priority | CVSS |
|---|---|---|---|---|
| October 2026 | 3800517 | SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code) | High | 8.8 |
| September 2026 | 3791068 | CLRF Injection vulnerability due to use of Jetty components in SAP Commerce Cloud (Search And Navigation) | High | 7.4 |
| September 2026 | 3787345 | Security Misconfiguration vulnerability due to use of Apache Log4j in SAP Commerce Cloud (Search and Navigation) | Medium | 5.9 |
| August 2026 | 3771065 | Improper Authorization in SAP Commerce Cloud (Data Hub Adapter) | Critical | 10.0 |
| August 2026 | 3773203 | Potential buffer overflow vulnerability affects SAP Commerce Cloud in public‑cloud deployments with NGINX | High | 8.1 |
| August 2026 | 3757815 | Potential Information Disclosure vulnerability in SAP Commerce Cloud (Bouncy Castle Java library) | Medium | 6.5 |
| August 2026 | 3778462 | Security Vulnerabilities in SAP Commerce Cloud (Search and Navigation) | Medium | 4.8 |
| July 2026 | 3753495 | Insecure Sample Credentials in SAP Commerce Cloud | Critical | 9.1 |
| July 2026 | 3763800 | Multiple vulnerabilities in Apache Tomcat within SAP Commerce Cloud | High | 8.1 |
| June 2026 | 3747484 | Multiple vulnerabilities in Apache Tomcat within SAP Commerce Cloud | High | 7.4 |
| May 2026 | 3733064 | Missing authentication check in SAP Commerce cloud configuration | Critical | 9.6 |
| May 2026 | 3716450 | Potential Improper Certificate Validation in SAP Commerce Cloud (Apache Log4j) | Medium | 4.8 |
| February 2026 | 3692405 | Race Condition in SAP Commerce Cloud | High | 7.4 |
| February 2026 | 3689543 | Race condition vulnerability in SAP Commerce Cloud | Medium | 5.9 |
| February 2026 | 3687771 | Information Disclosure vulnerability in SAP Commerce Cloud | Medium | 5.3 |
| December 2025 | 3683579 | Multiple vulnerabilities in Apache Tomcat within SAP Commerce Cloud | Critical | 9.6 |
| October 2025 | 3664466 | Denial of service (DOS) in SAP Commerce Cloud (Search and Navigation) | High | 7.5 |
| October 2025 | 3634724 | Directory Traversal vulnerability in SAP Commerce Cloud | Medium | 5.3 |
| September 2025 | 3632154 | Potential Improper Resource Release vulnerability in SAP Commerce Cloud | Low | 3.1 |
| April 2025 | 3590984 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat within SAP Commerce Cloud | High | 8.1 |
| April 2025 | 3543274 | Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud) | Medium | 6.8 |
| April 2025 | 3539465 | Information Disclosure Vulnerability in SAP Commerce Cloud | Medium | 4.2 |
| March 2025 | 3569602 | Cross-Site Scripting (XSS) vulnerability in SAP Commerce (Swagger UI) | High | 8.8 |
| March 2025 | 3566851 | Multiple vulnerabilities in Apache Tomcat within SAP Commerce Cloud | High | 8.6 |
| February 2025 | 3555364 | SameSite Defense in Depth not applied for some cookies in SAP Commerce | Medium | 6.8 |
| February 2025 | 3559510 | Missing Defense in Depth Against Clickjacking in SAP Commerce (Backoffice) | Medium | 6.8 |
| February 2025 | 3540273 | Multiple vulnerabilities in Apache Solr within SAP Commerce Cloud | Medium | 5.5 |
| December 2024 | 3535451 | Information Disclosure vulnerability in SAP Commerce Cloud | Low | 2.7 |
| September 2024 | 3459935 | Information Disclosure Vulnerability in SAP Commerce Cloud | High | 7.4 |
| September 2024 | 3430336 | Information Disclosure vulnerability in SAP Commerce Cloud | Medium | 5.9 |
| August 2024 | 3459935 | Information Disclosure Vulnerability in SAP Commerce Cloud | High | 7.4 |
| August 2024 | 3471450 | Information Disclosure Vulnerability in SAP Commerce | Medium | 5.3 |
| July 2024 | 3490515 | Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce | High | 7.2 |
| May 2024 | 3455438 | Multiple vulnerabilities in SAP CX Commerce | Critical | 9.8 |
| March 2024 | 3346500 | Improper authentication in SAP Commerce Cloud | High | 8.8 |
| December 2023 | 3394567 | Improper Access Control vulnerability in SAP Commerce Cloud | High | 8.1 |
| August 2023 | 3346500 | Improper authentication in SAP Commerce Cloud | High | 8.8 |
| August 2023 | 3341934 | Information Disclosure vulnerability in SAP Commerce (OCC API) | Medium | 5.9 |
| May 2023 | 3320145 | Denial of service (DOS) in SAP Commerce | High | 7.5 |
| May 2023 | 3321309 | Information Disclosure vulnerability in SAP Commerce (Backoffice) | High | 7.5 |
| April 2023 | 3316509 | Remote Code Execution vulnerability in SAP Commerce | Medium | 4.7 |