Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-41204

An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redire

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows them to steal credentials and hijack accounts. A successful attack could compromise the Confidentiality, Integrity, and Availability of the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP Commerce

  • 1905affected
  • 2005affected
  • 2105affected
  • 2011affected
  • 2205affected

References