CVE-2019-0238

SAP Commerce (previously known as SAP Hybris Commerce), before version 6.7, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Date published : 2019-01-08

http://www.securityfocus.com/bid/106462

https://launchpad.support.sap.com/#/notes/2697573