HY
Product
Hybris
8
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 6Low 0
Watch
Add Hybris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-0238 | 6.1 | Jan 8 | SAP Commerce (previously known as SAP Hybris Commerce), before version 6.7, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS)… Affected: before 6.7 |
| CVE-2018-2505 | 6.1 | Dec 11 | SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability in storefronts that are based on the product Affected: 6.2; 6.3; 6.4; 6.5; 6.6; 6.7 |
| CVE-2016-6856 | 6.1 | Dec 31 | Cross-site scripting (XSS) vulnerability in the Inbox Search feature in Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web… Affected: through 5.6.0.10 |
| CVE-2016-6858 | 5.4 | Dec 31 | Cross-site scripting (XSS) vulnerability in the Create Employee feature in Hybris Management Console (HMC) in SAP Hybris before 5.0.4.11, 5.1.0.x before 5.1.0.11, 5.1.1.x before… Affected: 5.0.4 before 5.0.4.11; 5.1.0 before 5.1.0.11; 5.1.1 before 5.1.1.12; 5.2.0 before 5.2.0.10; 5.3.0 before 5.3.0.10; 5.4.0 before 5.4.0.9; +4 more |
| CVE-2016-6857 | 5.4 | Dec 31 | Cross-site scripting (XSS) vulnerability in the Create Catalogue feature in Hybris Management Console (HMC) in SAP Hybris before 5.2.0.13, 5.3.x before 5.3.0.11, 5.4.x before… Affected: 5.2.0 before 5.2.0.13; 5.3.0 before 5.3.0.11; 5.4.0 before 5.4.0.11; 5.5.0 before 5.5.0.10; 5.5.1 before 5.5.1.11; 5.6.0 before 5.6.0.11; +1 more |
| CVE-2016-6859 | 4.3 | Dec 31 | Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace Affected: All versions, or not specified |
Showing 6