CVE-2019-0238

Mô tả

Tham khảo

• securityfocus.com/bid/106462 · Third Party Advisory
• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

Lỗ hổng khác của hybris

• CVE-2018-2505TRUNG BÌNH 6.1SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability in storefronts tha…
• CVE-2018-2463CAO 8.6The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (SSRF) attacks. This …
• CVE-2014-8871CAO 7.5Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 a…
• CVE-2016-6858TRUNG BÌNH 5.4Cross-site scripting (XSS) vulnerability in the Create Employee feature in Hybris Management Console (HMC) in SAP Hybris before 5.0.4.11, 5.…
• CVE-2016-6857TRUNG BÌNH 5.4Cross-site scripting (XSS) vulnerability in the Create Catalogue feature in Hybris Management Console (HMC) in SAP Hybris before 5.2.0.13, 5…