Unauthenticated Access Vulnerability in SAP Commerce Coupon Codes

CVE-2025-27435

What is CVE-2025-27435?

An unauthenticated attacker may exploit specific conditions in SAP Commerce to access sensitive customer coupon codes embedded in the URL parameters of the Coupon Campaign URL. This incident could enable the misuse of disclosed coupon codes, impacting the confidentiality and integrity of user data. It is essential for organizations using the affected versions of SAP Commerce to implement security measures to mitigate the risk associated with this vulnerability.

References