Description
SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| commerce_cloud | sap / commerce_cloud | 1808 | affected |
| commerce_cloud | sap / commerce_cloud | 1808 | affected |
| commerce_cloud | sap / commerce_cloud | 1808 | affected |
| commerce_cloud | sap / commerce_cloud | 1808 | affected |
| commerce_cloud | sap / commerce_cloud | 1808 | affected |
| commerce_cloud | sap / commerce_cloud | 1808 | affected |
| commerce_cloud | sap / commerce_cloud | 1808 | affected |
| commerce_cloud | sap / commerce_cloud | 1811 | affected |
| commerce_cloud | sap / commerce_cloud | 1811 | affected |
| commerce_cloud | sap / commerce_cloud | 1811 | affected |
| commerce_cloud | sap / commerce_cloud | 1811 | affected |
| commerce_cloud | sap / commerce_cloud | 1811 | affected |
| commerce_cloud | sap / commerce_cloud | 1811 | affected |
| commerce_cloud | sap / commerce_cloud | 1811 | affected |
| commerce_cloud | sap / commerce_cloud | 1905 | affected |
| commerce_cloud | sap / commerce_cloud | 1905 | affected |
| commerce_cloud | sap / commerce_cloud | 1905 | affected |
| commerce_cloud | sap / commerce_cloud | 1905 | affected |
| commerce_cloud | sap / commerce_cloud | 1905 | affected |
| commerce_cloud | sap / commerce_cloud | 1905 | affected |
| commerce_cloud | sap / commerce_cloud | 1905 | affected |
| commerce_cloud | sap / commerce_cloud | 6.4 | affected |
| commerce_cloud | sap / commerce_cloud | 6.4 | affected |
| commerce_cloud | sap / commerce_cloud | 6.4 | affected |
| commerce_cloud | sap / commerce_cloud | 6.4 | affected |
| commerce_cloud | sap / commerce_cloud | 6.4 | affected |
| commerce_cloud | sap / commerce_cloud | 6.4 | affected |
| commerce_cloud | sap / commerce_cloud | 6.4 | affected |
| commerce_cloud | sap / commerce_cloud | 6.5 | affected |
| commerce_cloud | sap / commerce_cloud | 6.5 | affected |
| commerce_cloud | sap / commerce_cloud | 6.5 | affected |
| commerce_cloud | sap / commerce_cloud | 6.5 | affected |
| commerce_cloud | sap / commerce_cloud | 6.5 | affected |
| commerce_cloud | sap / commerce_cloud | 6.5 | affected |
| commerce_cloud | sap / commerce_cloud | 6.5 | affected |
| commerce_cloud | sap / commerce_cloud | 6.6 | affected |
| commerce_cloud | sap / commerce_cloud | 6.6 | affected |
| commerce_cloud | sap / commerce_cloud | 6.6 | affected |
| commerce_cloud | sap / commerce_cloud | 6.6 | affected |
| commerce_cloud | sap / commerce_cloud | 6.6 | affected |
| commerce_cloud | sap / commerce_cloud | 6.6 | affected |
| commerce_cloud | sap / commerce_cloud | 6.6 | affected |
| commerce_cloud | sap / commerce_cloud | 6.7 | affected |
| commerce_cloud | sap / commerce_cloud | 6.7 | affected |
| commerce_cloud | sap / commerce_cloud | 6.7 | affected |
| commerce_cloud | sap / commerce_cloud | 6.7 | affected |
| commerce_cloud | sap / commerce_cloud | 6.7 | affected |
| commerce_cloud | sap / commerce_cloud | 6.7 | affected |
| commerce_cloud | sap / commerce_cloud | 6.7 | affected |
| SAP Commerce Cloud (virtualjdbc extension) | SAP SE / SAP Commerce Cloud (virtualjdbc extension) | < 1808 | affected |
| SAP Commerce Cloud (virtualjdbc extension) | SAP SE / SAP Commerce Cloud (virtualjdbc extension) | < 1811 | affected |
| SAP Commerce Cloud (virtualjdbc extension) | SAP SE / SAP Commerce Cloud (virtualjdbc extension) | < 1905 | affected |
| SAP Commerce Cloud (virtualjdbc extension) | SAP SE / SAP Commerce Cloud (virtualjdbc extension) | < 6.4 | affected |
| SAP Commerce Cloud (virtualjdbc extension) | SAP SE / SAP Commerce Cloud (virtualjdbc extension) | < 6.5 | affected |
| SAP Commerce Cloud (virtualjdbc extension) | SAP SE / SAP Commerce Cloud (virtualjdbc extension) | < 6.6 | affected |
| SAP Commerce Cloud (virtualjdbc extension) | SAP SE / SAP Commerce Cloud (virtualjdbc extension) | < 6.7 | affected |