CVE-2026-58231

Medienbericht

EPSS 0.73%
Veröffentlicht 11.08.2026 10:21:29
Zuletzt bearbeitet 17.08.2026 15:39:24
Erkennungen
Login

Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

SAP Commerce Cloud allows an unauthenticated
attacker to abuse a default authentication client and submit specially crafted
input to certain functions lacking sufficient validation. Successful
exploitation could enable arbitrary code execution and compromise internal
components, resulting in high impact on confidentiality, integrity, and
availability of the application.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 12

CNA 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

HerstellerSAP_SE

≫

Produkt SAP Commerce Cloud (Data Hub Adapter)

Default Statusunaffected

Version COM_CLOUD 2211

Status affected

Version 2211-JDK21

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.73%	0.508

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
SAP	10	3.9	6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.