High severity7.5NVD Advisory· Published Aug 28, 2017· Updated Jun 17, 2026

CVE-2014-8871

Description

Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 and earlier, 5.1.1.2 and earlier, 5.2.0.3 and earlier, and 5.3.0.1 and earlier.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SAP/Hybris
cpe:2.3:a:sap:hybris:*:*:*:*:*:*:*:*
Range: >=5.0.0,<=5.0.0.3
hybris/Commerce software suitellm-fuzzy
Range: <=5.0.3.3, <=5.0.0.3, <=5.0.4.4, <=5.1.0.1, <=5.1.1.2, <=5.2.0.3, <=5.3.0.1

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/130444/Hybris-Commerce-Software-Suite-5.x-File-Disclosure-Traversal.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2015/Feb/63nvdExploitMailing ListThird Party Advisory
www.securityfocus.com/archive/1/534722/100/1600/threadednvdThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/72681nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000