CVE Watch—

CVE-2019-0344

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

CVSS

—

Sem CVSS

EPSS

7.5%

p94

KEV

SIM

30 de set. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

7.1%EPSS · 30 dias7.5%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

SAP / Commerce Cloud

Vulnerabilidade

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

Adicionado ao KEV

30 de set. de 2024

Corrigir até

21 de out. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://web.archive.org/web/20191214053020/https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017 ; https://nvd.nist.gov/vuln/detail/CVE-2019-0344

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.