CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 1CVE-2020-26809 – SAP Hybris eCommerce Information Disclosure
https://notcve.org/view.php?id=CVE-2020-26809
10 Nov 2020 — SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission checks via the '/medias' endpoint hence gaining access to Secure Media folders. This folder could contain sensitive files that results in disclosure of sensitive information and impact system configuration confidentiality. SAP Commerce Cloud, versiones 1808,1811,1905,2005, permite a un atacante omitir las comprobaciones de autenticación y permisos existentes por medio del endpoint "/medias"... • http://packetstormsecurity.com/files/163146/SAP-Hybris-eCommerce-Information-Disclosure.html • CWE-276: Incorrect Default Permissions •
CVSS: 4.9EPSS: 0%CPEs: 4EXPL: 0CVE-2020-6363
https://notcve.org/view.php?id=CVE-2020-6363
15 Oct 2020 — SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, exposes several web applications that maintain sessions with a user. These sessions are established after the user has authenticated with username/passphrase credentials. The user can change their own passphrase, but this does not invalidate active sessions that the user may have with SAP Commerce Cloud web applications, which gives an attacker the opportunity to reuse old session credentials, resulting in Insufficient Session Expiration. SAP Commerce C... • https://launchpad.support.sap.com/#/notes/2965287 • CWE-613: Insufficient Session Expiration •
CVSS: 5.4EPSS: 0%CPEs: 4EXPL: 0CVE-2020-6272
https://notcve.org/view.php?id=CVE-2020-6272
15 Oct 2020 — SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorized content manager to inject malicious script into several web CMS components. These can be saved and later triggered, if an affected web page is visited, resulting in Cross-Site Scripting (XSS) vulnerability. SAP Commerce Cloud versiones - 1808, 1811, 1905, 2005, no codifican suficientemente las entradas del usuario, lo que permite a un administrador de contenido autenti... • https://launchpad.support.sap.com/#/notes/2917381 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.1EPSS: 0%CPEs: 5EXPL: 0CVE-2020-6302
https://notcve.org/view.php?id=CVE-2020-6302
09 Sep 2020 — SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is loaded initially. An attacker can get this session ID via shoulder surfing or man in the middle attack and subsequently get access to admin user accounts, leading to Session Fixation and complete compromise of the confidentiality, integrity and availability of the application. SAP Commerce versiones 6.7, 1808, 1811, 1905, 2005, contienen el ID de jSession en la URL backoffice cuando la ap... • https://launchpad.support.sap.com/#/notes/2934451 • CWE-384: Session Fixation •