Sap Commerce Hycom vulnerabilities

2 vulnerabilities

Known vulnerabilities in Sap Commerce Hycom, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2023-39439sap_se · sap commerce +2 moreSAP Commerce accepts empty passphrases.SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.EPSS0.71%7.5HighCVE-2023-37486sap_se · sap commerce (occ api) +2 moreInformation Disclosure vulnerability in SAP Commerce (OCC API)Under certain conditions SAP Commerce (OCC API) - versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211, endpoints allow an attacker to access information which would otherwise be restricted. On successful exploitation there could be a high impact on confidentiality with no impact on integrity and availability of the application.EPSS0.52%