[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-hk6CyJSj5MSaMYCDeIrtNngONhxBXQEAHW1bE4qVx8":3,"g5a-risk:CVE-2020-26809":140},{"success":4,"data":5,"meta":138},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":26,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":63,"references":64,"referencesCount":63,"weaknesses":85,"weaknessesCount":94,"isActivelyExploited":95,"cisaInfo":26,"otxData":26,"relatedBlogPosts":96,"seoMetadata":97,"configurations":122,"relatedVendorCves":136,"notableEvents":137},"CVE-2020-26809","What is CVE-2020-26809?","SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission checks via the '\u002Fmedias' endpoint hence gaining access to Secure Media folders. This folder could contain sensitive files that results in disclosure of sensitive information and impact system configuration confidentiality.","SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission checks via the '\u002Fmedias' endpoint henc...","2020-11-10T17:15:13.437","2021-06-17T17:21:00.987",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":36,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":28},"cna@sap.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[37],{"Source":17,"Type":18,"CVSSData":38,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":41,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":42,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,10,2.9,0.0207,[45,45,45,45,45,45,45],"Medium",[49,54,57,60],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"sap","commerce_cloud","1808","cpe:2.3:a:sap:commerce_cloud:1808:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":55,"criteria":56,"vulnerable":4},"1811","cpe:2.3:a:sap:commerce_cloud:1811:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":58,"criteria":59,"vulnerable":4},"1905","cpe:2.3:a:sap:commerce_cloud:1905:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":61,"criteria":62,"vulnerable":4},"2005","cpe:2.3:a:sap:commerce_cloud:2005:*:*:*:*:*:*:*",4,[65,70,76,82],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F163146\u002FSAP-Hybris-eCommerce-Information-Disclosure.html","Packetstormsecurity",[69],"Third Party Advisory",{"url":71,"source":72,"tags":73},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2021\u002FJun\u002F27","Seclists",[74,75,69],"Exploit","Mailing List",{"url":77,"source":78,"tags":79},"https:\u002F\u002Flaunchpad.support.sap.com\u002F#\u002Fnotes\u002F2975189","Sap",[80,81],"Permissions Required","Vendor Advisory",{"url":83,"source":78,"tags":84},"https:\u002F\u002Fwiki.scn.sap.com\u002Fwiki\u002Fpages\u002Fviewpage.action?pageId=562725571",[81],[86],{"id":87,"name":88,"description":89,"extendedDescription":90,"status":91,"abstraction":92,"structure":93},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",1,false,[],{"title":98,"metaDescription":99,"keywords":100,"canonicalUrl":101,"structuredData":102},"What is CVE-2020-26809? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-26809, a medium severity cyber security vulnerability from 2020. SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows...","CVE-2020-26809, CVE-2020-26809 vulnerability, CVE-2020-26809 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, sap security, commerce_cloud vulnerability","\u002Fwhat-is\u002Fcve-2020-26809",{"@context":103,"@type":104,"headline":98,"description":99,"datePublished":10,"dateModified":11,"author":105,"publisher":109,"about":113,"mainEntityOfPage":117,"articleSection":120,"keywords":121},"https:\u002F\u002Fschema.org","TechArticle",{"@type":106,"name":107,"url":108},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":106,"name":107,"url":108,"logo":110},{"@type":111,"url":112},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":114,"name":6,"description":115,"additionalType":116},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":118,"@id":119},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-26809","Cybersecurity","CVE-2020-26809, CVE-2020-26809 vulnerability, CVE-2020-26809 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[123],{"Operator":26,"Negate":26,"Nodes":124},[125],{"Operator":126,"Negate":26,"CPEMatch":127},"OR",[128,130,132,134],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":129,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5649AB0A-1D84-4716-A178-F196A1DA9C1A",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":131,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A9DE60D1-95FF-4220-AE63-2C351781FDA1",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":133,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"19E11B22-F514-48D6-B78F-8A64CE1BA364",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":135,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DA3BA250-AB0A-4A27-A81C-C3EECD71B521",[],[],{"lastModified":11,"cacheTime":139,"version":39},1792362021346,{"score":141,"band":47,"action":142,"scoredAt":143},49,"Plan remediation","2026-10-16T06:49:50.493739+00:00"]