VYPR

Assisted Service Module

by SAP

CVEs (1)

  • CVE-2024-47577LowDec 10, 2024
    risk 0.18cvss 2.7epss 0.00

    Webservice API endpoints for Assisted Service Module within SAP Commerce Cloud has information disclosure vulnerability. When an authorized agent searches for customer to manage their accounts, the request url includes customer data and it is recorded in server logs. If an…