SAP

Commerce Backoffice

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-45278

  • EPSS 0.15%
  • Published 08.10.2024 04:15:08
  • Last modified 14.11.2024 17:17:12

SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the applicatio...

5.4

CVE-2024-41735

  • EPSS 0.38%
  • Published 13.08.2024 04:15:09
  • Last modified 12.09.2024 13:53:32

SAP Commerce Backoffice does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability causing low impact on confidentiality and integrity of the application.