CVE-2016-6856

Description

References

• securityfocus.com/bid/93954 · Third Party Advisory
• compass-security.com/fileadmin/Datein/Research/Advisories/CVE-2016-685X_SAP-Hybris_XSS.txt · Third Party Advisory

More vulnerabilities in hybris

• CVE-2019-0238MEDIUM 6.1SAP Commerce (previously known as SAP Hybris Commerce), before version 6.7, does not sufficiently encode user-controlled inputs, resulting i…
• CVE-2018-2505MEDIUM 6.1SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability in storefronts tha…
• CVE-2018-2463HIGH 8.6The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (SSRF) attacks. This …
• CVE-2014-8871HIGH 7.5Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 a…
• CVE-2016-6858MEDIUM 5.4Cross-site scripting (XSS) vulnerability in the Create Employee feature in Hybris Management Console (HMC) in SAP Hybris before 5.0.4.11, 5.…