CoreCVE
Back

HIGH

An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL

Published Oct 11, 2022

Description

An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows them to steal credentials and hijack accounts. A successful attack could compromise the Confidentiality, Integrity, and Availability of the system.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner sap
Published Oct 11, 2022
Updated May 20, 2025
Reserved Sep 21, 2022
Link CVE-2022-41204
CISA Vulnrichment
Updated May 20, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-41204
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-41204