Login Request a demo
HY
Product
Hybris
by Sap · last CVE Jan 8, 2019
8
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 2Medium 6Low 0
Severity
All severities8Critical0High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Hybris to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-2463
8.6
2%
Sep 11
The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (SSRF) attacks
Affected: 6.0 through 6.7
CVE-2014-8871
7.5
4%
Aug 28
Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 and earlier, 5.1.1.2 and earlier,…
Affected: 5.0.0 through 5.0.0.3; 5.0.3 through 5.0.3.3; 5.0.4 through 5.0.4.4; 5.1.0 through 5.1.0.1; 5.1.1 through 5.1.1.2; 5.2.0 through 5.2.0.3; +1 more
CVE-2019-0238
6.1
1%
Jan 8
SAP Commerce (previously known as SAP Hybris Commerce), before version 6.7, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)…
Affected: before 6.7
CVE-2018-2505
6.1
1%
Dec 11
SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability in storefronts that are based on the product
Affected: 6.2; 6.3; 6.4; 6.5; 6.6; 6.7
CVE-2016-6856
6.1
1%
Dec 31
Cross-site scripting (XSS) vulnerability in the Inbox Search feature in Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web…
Affected: through 5.6.0.10
CVE-2016-6858
5.4
1%
Dec 31
Cross-site scripting (XSS) vulnerability in the Create Employee feature in Hybris Management Console (HMC) in SAP Hybris before 5.0.4.11, 5.1.0.x before 5.1.0.11, 5.1.1.x before…
Affected: 5.0.4 before 5.0.4.11; 5.1.0 before 5.1.0.11; 5.1.1 before 5.1.1.12; 5.2.0 before 5.2.0.10; 5.3.0 before 5.3.0.10; 5.4.0 before 5.4.0.9; +4 more
CVE-2016-6857
5.4
1%
Dec 31
Cross-site scripting (XSS) vulnerability in the Create Catalogue feature in Hybris Management Console (HMC) in SAP Hybris before 5.2.0.13, 5.3.x before 5.3.0.11, 5.4.x before…
Affected: 5.2.0 before 5.2.0.13; 5.3.0 before 5.3.0.11; 5.4.0 before 5.4.0.11; 5.5.0 before 5.5.0.10; 5.5.1 before 5.5.1.11; 5.6.0 before 5.6.0.11; +1 more
CVE-2016-6859
4.3
1%
Dec 31
Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace
Affected: All versions, or not specified
Showing 8