Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Information Disclosure vulnerability in SAP Commerce (OCC API)
Vulnerability Description
Under certain conditions SAP Commerce (OCC API) - versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211, endpoints allow an attacker to access information which would otherwise be restricted. On successful exploitation there could be a high impact on confidentiality with no impact on integrity and availability of the application.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
通过缓存导致的信息暴露
Vulnerability Title
SAP Commerce 信息泄露漏洞
Vulnerability Description
SAP Commerce是德国思爱普（SAP）公司的一套基于云的电子商务平台。该产支持销售管理、营销管理、订单管理和运营管理等。 SAP Commerce (OCC API) 存在信息泄露漏洞，该漏洞源于在某些条件下，HY_COM 2105、HY_COM 2205、COM_CLOUD 2211 端点可以访问受限制信息。
CVSS Information
N/A
Vulnerability Type
N/A