CVE-2018-2463

CVE-2018-2463: vulnerability in SAP Hybris Commerce

Published · Updated

Follow this CVE+ Monitor SAP Hybris Commerce

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.6%
The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (SSRF) attacks. This is due to a misconfiguration of XML parser that is used in the server-side implementation of OCC.
Affected products
SAP · SAP Hybris Commerce