CVE-2020-6232: SAP Commerce Cloud

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media.

Affected products

• SAP Commerce Cloud: version 1811 only; version 1905 only

Published 2020-04-14. Last modified 2026-06-17.