Approved changes feed: RSS · Atom

cpe:2.3:a:sap_se:sap_commerce_cloud_(smartedit_extension):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSap Se (f8f3f5db-c060-5230-a8bd-f91674203607)
ProductSap Commerce Cloud (Smartedit Extension) (2e0d99a3-39ca-5cdc-ab7c-fa1794ec6432)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6200 vulnerable 2026-06-08 05:26:44.705423 Details available
MEDIUM (5.4)
The SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulnerable to client-side angularjs template injection, a variant of Cross-Site-Scripting (XSS) that exploits the templating facilities of the angular framework.
Published: 2020-03-10T20:18:50.000Z
Updated: 2024-08-04T08:55:21.904Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.