Sap Hybris
8 CVEs affecting Sap Hybris. Latest disclosed: 2019-01-08. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-2463 | High | 8.6 | 2018-09-11 | The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (SSRF) attacks. This is due to a misconf… |
CVE-2014-8871 | High | 7.5 | 2017-08-28 | Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 and earlier, 5.1.1.2… |
CVE-2019-0238 | Medium | 6.1 | 2019-01-08 | SAP Commerce (previously known as SAP Hybris Commerce), before version 6.7, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Script… |
CVE-2018-2505 | Medium | 6.1 | 2018-12-11 | SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability in storefronts that are based on the… |
CVE-2016-6856 | Medium | 6.1 | 2016-12-31 | Cross-site scripting (XSS) vulnerability in the Inbox Search feature in Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to inj… |
CVE-2016-6858 | Medium | 5.4 | 2016-12-31 | Cross-site scripting (XSS) vulnerability in the Create Employee feature in Hybris Management Console (HMC) in SAP Hybris before 5.0.4.11, 5.1.0.x before 5.1.0… |
CVE-2016-6857 | Medium | 5.4 | 2016-12-31 | Cross-site scripting (XSS) vulnerability in the Create Catalogue feature in Hybris Management Console (HMC) in SAP Hybris before 5.2.0.13, 5.3.x before 5.3.0.1… |
CVE-2016-6859 | Medium | 4.3 | 2016-12-31 | Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java… |