Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-58231

Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high impact on confidentiality, integrity, and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Commerce Cloud (Data Hub Adapter)

Default version status: unaffected

  • COM_CLOUD 2211affected
  • 2211-JDK21affected

References