High severity7.5NVD Advisory· Published Aug 28, 2017· Updated May 13, 2026

CVE-2014-8871

Description

Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 and earlier, 5.1.1.2 and earlier, 5.2.0.3 and earlier, and 5.3.0.1 and earlier.

Affected products

SAP/Hybris
cpe:2.3:a:sap:hybris:*:*:*:*:*:*:*:*
Range: >=5.0.0,<=5.0.0.3

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

packetstormsecurity.com/files/130444/Hybris-Commerce-Software-Suite-5.x-File-Disclosure-Traversal.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2015/Feb/63nvdExploitMailing ListThird Party Advisory
www.securityfocus.com/archive/1/534722/100/1600/threadednvdThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/72681nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000