description: SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability in storefronts that are based on the product. Fixed in versions (SAP Hybris Commerce, versions 6.2, 6.3, 6.4, 6.5, 6.6, 6.7).
problem types: Code Injection
affected:
{
product: SAP Commerce (SAP Hybris Commerce)
vendor: SAP
versions:
status: affected, version: 6.2
status: affected, version: 6.3
status: affected, version: 6.4
status: affected, version: 6.5
status: affected, version: 6.6
status: affected, version: 6.7
}