← Back

Commerce Backoffice

commerce_backoffice

Vendor: Sap • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-45278
1Sap
1Commerce Backoffice
Jun 17, 2026
Oct 8, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality a...Show more
SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.Show less
CVE-2024-41735
1Sap
1Commerce Backoffice
Jun 17, 2026
Aug 13, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
SAP Commerce Backoffice does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability causing low impact on confidentiality and integrity of the application.