CVE-2019-0344

SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

Description

SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.

Severity: CRITICAL

CVSS Score: 9.8

Vendor: SAP

Product: Commerce Cloud