Total vulnerabilities in the database
An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows them to steal credentials and hijack accounts. A successful attack could compromise the Confidentiality, Integrity, and Availability of the system.
| Software | From | Fixed in |
|---|---|---|
| sap / commerce | 1905 | 1905.x |
| sap / commerce | 2005 | 2005.x |
| sap / commerce | 2011 | 2011.x |
| sap / commerce | 2105 | 2105.x |
| sap / commerce | 2205 | 2205.x |