SAP Commerce 6.7

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:commerce:6.7:*:*:*:*:*:*:*

part: a version: 6.7 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductCommerce (c8d5cf39-be5f-5cca-9100-1af37555a034)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6302 vulnerable 2026-06-08 05:26:45.048569 Details available
MEDIUM (6.4)
SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is loaded initially. An attacker can get this session ID via shoulder surfing or man in the middle attack and subsequently get access to admin user accounts, leading to Session Fixation and complete compromise of the confidentiality, integrity and availability of the application.
Published: 2020-09-09T12:52:14.000Z
Updated: 2024-08-04T08:55:22.407Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6265 vulnerable 2026-06-08 05:26:44.951976 Details available
CRITICAL (9.8)
SAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808, 1811, 1905, allows an attacker to bypass the authentication and/or authorization that has been configured by the system administrator due to the use of Hardcoded Credentials.
Published: 2020-06-09T18:24:14.000Z
Updated: 2024-08-04T08:55:22.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6264 vulnerable 2026-06-08 05:26:44.948164 Details available
HIGH (8.6)
SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under certain conditions which would otherwise be restricted, leading to Information Disclosure.
Published: 2020-06-10T12:45:10.000Z
Updated: 2024-08-04T08:55:22.245Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.