Security Advisory
CVE-2018-2505
6.1
MEDIUM
Vulnerability Description
SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability in storefronts that are based on the product. Fixed in versions (SAP Hybris Commerce, versions 6.2, 6.3, 6.4, 6.5, 6.6, 6.7).
Published Date
December 11, 2018
Official Source
NIST NVD Advisory