CVE-2020-6264: SAP Commerce

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under certain conditions which would otherwise be restricted, leading to Information Disclosure.

Affected products

• SAP Commerce: version 6.7 only; version 1808 only; version 1811 only; version 1905 only

Published 2020-06-10. Last modified 2026-06-17.