Sap Hybris Commerce vulnerabilities

1 known vulnerability affecting sap/sap_hybris_commerce.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2018-2463HIGHCVSS 8.6v= 6.*2018-09-11

CVE-2018-2463 [HIGH] CWE-918 CVE-2018-2463: The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-si The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (SSRF) attacks. This is due to a misconfiguration of XML parser that is used in the server-side implementation of OCC.