high7.5
CVE-2014-8871
Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 and earlier, 5.1.1.2…
Impact
Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 and earlier, 5.1.1.2 and earlier, 5.2.0.3 and earlier, and 5.3.0.1 and earlier.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Hybris | from 5.0.0 through 5.0.0.3 from 5.0.3 through 5.0.3.3 from 5.0.4 through 5.0.4.4 from 5.1.0 through 5.1.0.1 from 5.1.1 through 5.1.1.2 from 5.2.0 through 5.2.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/130444/Hybris-Commerce-Software-Suite-5.x-File-Disclosure-Traversal.html
- http://seclists.org/fulldisclosure/2015/Feb/63
- http://www.securityfocus.com/archive/1/534722/100/1600/threaded
- http://www.securityfocus.com/bid/72681
- http://packetstormsecurity.com/files/130444/Hybris-Commerce-Software-Suite-5.x-File-Disclosure-Traversal.html
- http://seclists.org/fulldisclosure/2015/Feb/63
- http://www.securityfocus.com/archive/1/534722/100/1600/threaded
- http://www.securityfocus.com/bid/72681