CVE-2016-6856

Cross-site scripting XSS vulnerability in the Inbox Search feature in Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter...

CVE-2016-6856

CVE-2016-6856 describes a cross-site scripting (XSS) vulnerability in the Inbox Search feature of the SAP Hybris Hybris Management Console (HMC) prior to version 6.0. The issue allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter. The provided connected so...