CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.8. Exploitation may require the attacker to be authenticated.
CVE
CVE-2019-0308
Severity
MEDIUM
CVSS
6.8
EPSS
0.86%
Original NVD Description
An authenticated attacker in SAP E-Commerce (Business-to-Consumer application), versions 7.3, 7.31, 7.32, 7.33, 7.54, can change the price of the product to zero and also checkout, by injecting an HTML code in the application that will be executed whenever the victim logs in to the application even on a different machine, leading to Code Injection.
Related CVEs
Other vulnerabilities affecting the same vendor(s)