sap commerce-cloud CVE-2021-33666 is a vulnerability in SAP Commerce Cloud
Published on June 9, 2021

When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, could be used to facilitate an XSS attack or malware proliferation.

NVD


Products Associated with CVE-2021-33666

Want to know whenever a new CVE is published for SAP Commerce Cloud? stack.watch will email you.

SAP Commerce Cloud
 

Affected Versions

SAP SE SAP Commerce Cloud Version < 100 is affected by CVE-2021-33666

Exploit Probability

EPSS
0.15%
Percentile
35.46%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.