SAP Commerce — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in SAP Commerce, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting SAP Commerce. It collects advisories related to software flaws, such as injection, access control, and deserialization issues, covering a defined historical period. Readers can track the vendor’s security announcements, analyze the impact of a specific weakness class, and review the product’s vulnerability history. The data is structured to support security operations teams in risk assessment and remediation planning.

Vendor: SAP SE

CVE ID	Title	CVSS	Severity	Published
CVE-2025-24875	SameSite Defense in Depth not applied for some cookies in SAP Commerce CWE-352	6.8	Medium	2025-02-11
CVE-2024-41733	Information Disclosure Vulnerability in SAP Commerce CWE-200	5.3	Medium	2024-08-13
CVE-2024-39597	[CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefront B2B sites of SAP Commerce CWE-285	7.2	High	2024-07-09
CVE-2023-39439	SAP Commerce accepts empty passphrases. CWE-258	8.8	High	2023-08-08
CVE-2022-41204	SAP Commerce 输入验证错误漏洞 CWE-601	8.8	-	2022-10-11
CVE-2021-42064	SAP Commerce SQL注入漏洞	9.1	-	2021-12-14
CVE-2021-40502	SAP Commerce 授权问题漏洞 CWE-862	8.8	-	2021-11-10
CVE-2021-27602	SAP Commerce 代码注入漏洞	9.9	-	2021-04-13
CVE-2021-21477	思爱普 SAP Commerce Cloud 代码注入漏洞	9.9	-	2021-02-09
CVE-2020-6302	SAP Commerce 安全漏洞 CWE-384	8.1	-	2020-09-09
CVE-2020-6264	SAP Commerce 信息泄露漏洞	7.5	-	2020-06-10
CVE-2020-6265	SAP Commerce 信任管理问题漏洞 CWE-798	9.8	-	2020-06-09
CVE-2020-6238	SAP Commerce 代码问题漏洞	10.0	-	2020-04-14
CVE-2020-6232	SAP Commerce 安全漏洞	5.3	-	2020-04-14

All 14 known CVE vulnerabilities affecting SAP Commerce with full Chinese analysis, references, and POCs where available.