SAP Commerce Cloud (virtualjdbc extension)

< 6.6

OTHER 1 CVE

< 6.5

OTHER 1 CVE

< 1808

OTHER 1 CVE

< 1905

OTHER 1 CVE

< 6.7

OTHER 1 CVE

< 6.4

OTHER 1 CVE

< 1811

OTHER 1 CVE

CVE-2019-0344

Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbitrary code on a target machine with 'Hybris' user rights, resulting in Code Injection.

UNKNOWN Aug 14, 2019