2105

DATE	CVE	VULNERABILITY TITLE	RISK
2022-10-11	CVE-2022-41204	Open Redirect vulnerability in SAP Commerce An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. network low complexity sap CWE-601	8.8
2021-12-14	CVE-2021-42064	SQL Injection vulnerability in SAP Commerce If configured to use an Oracle database and if a query is created using the flexible search java api with a parameterized "in" clause, SAP Commerce - versions 1905, 2005, 2105, 2011, allows attacker to execute crafted database queries, exposing backend database. network sap CWE-89	6.8