Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-27619

SAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low privileged user to search for attributes which are not supposed to be displayed to them. Although the search results are masked, the user can iteratively enter one character at a time to search and determine the masked attribute value thereby leading to information disclosure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.7%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
Products affected by CVE-2021-27619
  • Sap » Commerce » Version: 1808
    cpe:2.3:a:sap:commerce:1808
  • Sap » Commerce » Version: 1811
    cpe:2.3:a:sap:commerce:1811
  • Sap » Commerce » Version: 1905
    cpe:2.3:a:sap:commerce:1905
  • Sap » Commerce » Version: 2005
    cpe:2.3:a:sap:commerce:2005
  • Sap » Commerce » Version: 2011
    cpe:2.3:a:sap:commerce:2011


Products
Pricing
Contact Us

Shodan ® - All rights reserved