SAP Note 3620264
Security Misconfiguration vulnerability in Spring security within SAP Commerce Cloud and SAP Datahub
MediumCVSS 6.6SAP Commerce Cloud and SAP Datahub
- CVE(s)
- CVE-2025-22228
- CVSS vector
- CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products and versions
- Product SAP Commerce Cloud and SAP Datahub
Versions: HY_COM 2205, HY_DHUB 2205, COM_CLOUD 2211, DHUB_CLOUD 2211
Appears in
Patch Days listing this note, newest first.
- September 2025NewMediumCVSS 6.6