CVE-2016-6856 in Hybris

Resumen (Inglés)

Cross-site scripting (XSS) vulnerability in the Inbox Search feature in Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2016-08-18

Divulgación

2016-12-31

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
94740	SAP Hybris Management Console secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2016-6856

Fuentes

• MITRE
• NVD
• CVE Details