CVE Watch—

CVE-2019-0344

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

CVSS

—

No CVSS

EPSS

7.1%

p94

KEV

YES

Sep 30, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

7.1%EPSS · 30 days7.1%

2026-08-022026-08-31

KEV catalog record

Product

SAP / Commerce Cloud

Vulnerability

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

Added to KEV

Sep 30, 2024

Remediate by

Oct 21, 2024

Known ransomware use

Summary description

SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://web.archive.org/web/20191214053020/https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017 ; https://nvd.nist.gov/vuln/detail/CVE-2019-0344

Related CVEs

No related CVEs by CWE or product.