PULSE
ES
FEED
ransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Otherransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Other
← All CVEs
CVE Watch—

CVE-2019-0344

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

CVSS

—

No CVSS

EPSS

7.1%

p94

KEV

YES

Sep 30, 2024

Exploit Today

78

0-100

Published: — · Last modified: —

EPSS · 30d
7.1%EPSS · 30 days7.1%
2026-09-172026-10-15
KEV catalog record

Product

SAP / Commerce Cloud

Vulnerability

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

Added to KEV

Sep 30, 2024

Remediate by

Oct 21, 2024

Known ransomware use

No

Summary description

SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://web.archive.org/web/20191214053020/https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017 ; https://nvd.nist.gov/vuln/detail/CVE-2019-0344

Related CVEs

No related CVEs by CWE or product.