Sap hybris commerce

This hub aggregates every CVE we track for Sap hybris commerce, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 3 most recently published vulnerabilities affecting Sap hybris commerce.

• CVE-2023-37486Information Disclosure vulnerability in SAP Commerce (OCC API)5.9Aug 8, 2023
• CVE-2018-2505SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability in storefronts that are based on the product. Fixed in versions (SAP Hybris...6.1Dec 11, 2018
• CVE-2018-2463The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (SSRF) attacks. This is due to a misconfiguration of XML parser that is used i...8.6Sep 11, 2018