Security Advisory
CVE-2016-6856
6.1
MEDIUM
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Inbox Search feature in Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter.
Published Date
December 31, 2016
Official Source
NIST NVD Advisory