4 matches found
CVE-2016-6856
Cross-site scripting XSS vulnerability in the Inbox Search feature in Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter...
CVE-2016-6856
Cross-site scripting XSS vulnerability in the Inbox Search feature in Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter...
PT-2016-7147
Name of the Vulnerable Software and Affected Versions SAP Hybris versions prior to 6.0 Description The issue is related to a cross-site scripting XSS vulnerability in the Inbox Search feature of the Hybris Management Console HMC. This vulnerability allows remote attackers to inject arbitrary web...
CVE-2016-6856: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Inbox Search feature in Hybris Management Console HMC in SAP Hybris before 6.0 allows remote attackers to inject arbitrary web script or HTML via the itemsperpage parameter...