References https://avd.aliyun.com/detail?id=AVD-2019-0344 https://cve.imfht.com/product/SAP%20Commerce%20Cloud%20(virtualjdbc%20extension) https://www.invicti.com/web-application-vulnerabilities/sap-hybris-deserialization-rce https://vuldb.com/vuln/140054 https://www.cvedetails.com/cve/CVE-2019-0344/ https://www.nsfocus.net/vulndb/53732 https://vi.loginsoft.com/cve/CVE-2019-0344 https://www.precogs.ai/vulnerability/cve-2019-0344-sap-commerce-cloud-deserialization https://layersevensecurity.com/sap-security-notes-august-2019/ https://www.securityweek.com/organizations-warned-of-exploited-sap-gpac-and-d-link-vulnerabilities/
Related Vulnerabilities金蝶eascloud管理控制端任意文件上传PoCCVE-2026-0702: VidShop for WooCommerce <= 1.1.4 - SQL Injection关于U9 cloud存在接口XML注入漏洞的安全通告关于U9 cloud存在接口SQL注入漏洞的安全通告关于U9 cloud存在接口无授权访问漏洞的安全通告关于U8cloud所有版本CodeSyncServlet接口存在任意文件下载漏洞的安全通告关于NC Cloud及YonBIP高级版系统的公共入口接口漏洞安全通告关于用友GRP-U8Cloud产品getUsersList及getNoteCode存在信息泄露漏洞的安全通告PoCCVE-2026-11387: SMS Alert – SMS & OTP for WooCommerce - Privilege EscalationPoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity SwitchPoCCVE-2026-27542: WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation关于U9 cloud接口存在BinaryFormatter反序列化漏洞的安全通告