CVE-2026-34263: CVE-2026-34263: güvenlik açığı

Açıklama (NVD)

Due to improper Spring Security configuration, SAP Commerce Cloud allows an unauthenticated user to perform malicious input injection, resulting in arbitrary server-side code execution, leading to high impact on Confidentiality, Integrity, and Availability of the application.

Özet bilgiler

CVSS v3.1

9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

%0,61 (yüzdelik 49)

CWE

CWE-459

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• me.sap.com
• url.sap
• CWE-459