[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbihUKG2W0TC3VT0Zhyk15TQN6_EXmbM6XcBcAwISek8":3,"g5a-risk:CVE-2023-39439":119},{"success":4,"data":5,"meta":116},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":37,"epssPercentile":26,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":53,"references":54,"referencesCount":64,"weaknesses":65,"weaknessesCount":74,"isActivelyExploited":75,"cisaInfo":26,"otxData":26,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":114,"notableEvents":115},"CVE-2023-39439","What is CVE-2023-39439?","SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.","2023-08-08T01:15:19.793","2024-09-28T22:15:04.243",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[15,29],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":28},"cna@sap.com","Secondary",{"Version":19,"VectorString":33,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":34,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":24,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","REQUIRED",8.8,2.8,0.00713,[37,37,37,37,37,37,37],"Critical",[41,46,50],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"sap","commerce_cloud","2211","cpe:2.3:a:sap:commerce_cloud:2211:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":48,"criteria":49,"vulnerable":4},"commerce_hycom","2105","cpe:2.3:a:sap:commerce_hycom:2105:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":51,"criteria":52,"vulnerable":4},"2205","cpe:2.3:a:sap:commerce_hycom:2205:*:*:*:*:*:*:*",3,[55,60],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fme.sap.com\u002Fnotes\u002F3346500","Sap",[59],"Permissions Required",{"url":61,"source":57,"tags":62},"https:\u002F\u002Fwww.sap.com\u002Fdocuments\u002F2022\u002F02\u002Ffa865ea4-167e-0010-bca6-c68f7e60039b.html",[63],"Vendor Advisory",2,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-258","Empty Password in Configuration File","Using an empty string as a password is insecure.","","Incomplete","Variant","Simple",1,false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2023-39439? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-39439, a critical severity cyber security vulnerability from 2023. SAP Commerce Cloud may accept an empty passphrase for u...","CVE-2023-39439, CVE-2023-39439 vulnerability, CVE-2023-39439 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, sap security, commerce_cloud vulnerability, commerce_hycom vulnerability","\u002Fwhat-is\u002Fcve-2023-39439",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":9,"dateModified":10,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-39439","Cybersecurity","CVE-2023-39439, CVE-2023-39439 vulnerability, CVE-2023-39439 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":26,"Negate":26,"Nodes":104},[105],{"Operator":106,"Negate":26,"CPEMatch":107},"OR",[108,110,112],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":109,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"4AC6D6B9-6A5A-4631-B10F-FB95150E1B68",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":111,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EF73F0A2-3864-40F6-9459-37BE87FD557D",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"320EE191-083F-41E2-B255-11679AB47B85",[],[],{"lastModified":10,"cacheTime":117,"version":118},1792365202058,"2.0",{"score":120,"band":121,"action":122,"scoredAt":123},55,"Medium","Plan remediation","2026-10-16T06:58:46.226485+00:00"]