Medium severity6.1NVD Advisory· Published Jan 8, 2019· Updated Jun 17, 2026
CVE-2019-0238
CVE-2019-0238
Description
SAP Commerce (previously known as SAP Hybris Commerce), before version 6.7, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Affected products
4- Range: <6.7
- SAP SE/SAP Commerce (ex. SAP Hybris Commerce)v5Range: < 6.7
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/106462nvdThird Party AdvisoryVDB Entry
- launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
- wiki.scn.sap.com/wiki/pages/viewpage.actionnvdVendor Advisory
News mentions
0No linked articles in our index yet.