CVE record · 1 source
CVE-2026-89113
CVSS 8.8SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query.
- Vendor
- SAP
- Product
- Commerce Cloud
- CVSS
- 8.8
- EPSS
- 0.004 (p38)
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query.
SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially crafted requests to affected functionality to inject…