SAP Note 3791068
CLRF Injection vulnerability due to use of Jetty components in SAP Commerce Cloud (Search And Navigation)
HighCVSS 7.4SAP Commerce Cloud
- CVE(s)
- CVE-2026-2332
- CVSS vector
- CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products and versions
- Product SAP Commerce Cloud (Search And Navigation)
Versions: COM_CLOUD 2211, 2211-JDK21
Appears in
Patch Days listing this note, newest first.
- September 2026NewHighCVSS 7.4