Spryker

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Spryker records in CISA KEV

No Spryker vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Commerce Os · all components

TI-2023-12279 CVE-2023-27568 · GHSA-rhgc-74xq-pwjh

HIGH 73

SQL injection vulnerability inSpryker Commerce OS 0.9 that allows for access to sensitive data via customer/order?orderSearchForm[searchText]=

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01209 Published 2023-05-04 No fix listed CWE-89