CVE Watch—

CVE-2019-0344

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

CVSS

—

Sin CVSS

EPSS

7.1%

p94

KEV

SÍ

30 sept 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

7.1%EPSS · 30 días7.1%

2026-06-302026-07-17

Ficha del catálogo KEV

Producto

SAP / Commerce Cloud

Vulnerabilidad

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

Añadido a KEV

30 sept 2024

Remediar antes de

21 oct 2024

Uso conocido en ransomware

Descripción resumida

SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://web.archive.org/web/20191214053020/https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017 ; https://nvd.nist.gov/vuln/detail/CVE-2019-0344

CVEs relacionados

Sin CVEs relacionados por CWE o producto.