Vulnerability Details CVE-2019-0322
SAP Commerce Cloud (previously known as SAP Hybris Commerce), (HY_COM, versions 6.3, 6.4, 6.5, 6.6, 6.7, 1808, 1811), allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.7%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://www.securityfocus.com/bid/109076
- https://launchpad.support.sap.com/#/notes/2781873
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
- http://www.securityfocus.com/bid/109076
- https://launchpad.support.sap.com/#/notes/2781873
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
Products affected by CVE-2019-0322
-
cpe:2.3:a:sap:commerce_cloud:1808
-
cpe:2.3:a:sap:commerce_cloud:1811
-
cpe:2.3:a:sap:commerce_cloud:6.3
-
cpe:2.3:a:sap:commerce_cloud:6.4
-
cpe:2.3:a:sap:commerce_cloud:6.5
-
cpe:2.3:a:sap:commerce_cloud:6.6
-
cpe:2.3:a:sap:commerce_cloud:6.7