What is CVE-2025-27434?

CVE-2025-27434 is a high-severity vulnerability in Sap_se Sap Commerce (Swagger Ui), classified under Cross-site Scripting. CVSS score: 8.8/10. Published 2025-03-11.

How severe is CVE-2025-27434?

High severity. CVSS v3 base score is 8.8 out of 10.

XSS in Sap_se Sap Commerce (Swagger Ui)

CVE-2025-27434

Due to insufficient input validation, SAP Commerce (Swagger UI) allows an unauthenticated attacker to inject the malicious code from remote sources, which can be leveraged by an attacker to execute a cross-site scripting (XSS) attack. This…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.004 (35.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Sap_se Sap Commerce (Swagger Ui) — versions COM_CLOUD 2211

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cna@sap.com
cna@sap.com

Frequently asked questions

What is CVE-2025-27434?: CVE-2025-27434 is a high-severity vulnerability in Sap_se Sap Commerce (Swagger Ui), classified under Cross-site Scripting. CVSS score: 8.8/10. Published 2025-03-11.
How severe is CVE-2025-27434?: High severity. CVSS v3 base score is 8.8 out of 10.