CVE-2019-0343 is a vulnerability in SAP Commerce Cloud
Published on August 14, 2019
SAP Commerce Cloud (Mediaconversion Extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, allows an authenticated Backoffice/HMC user to inject code that can be executed by the application, leading to Code Injection. An attacker could thereby control the behavior of the application.
Products Associated with CVE-2019-0343
Want to know whenever a new CVE is published for SAP Commerce Cloud? stack.watch will email you.
Affected Versions
SAP SE SAP Commerce Cloud (Mediaconversion Extension):- Version < 6.4 is affected.
- Version < 6.5 is affected.
- Version < 6.6 is affected.
- Version < 6.7 is affected.
- Version < 1808 is affected.
- Version < 1811 is affected.
- Version < 1905 is affected.
Exploit Probability
EPSS
0.49%
Percentile
64.97%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.