CVE-2018-2463

The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (SSRF) attacks

published September 11, 2018

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (SSRF) attacks. This is due to a misconfiguration of XML parser that is used in the server-side implementation of OCC.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01638 · 76.2th percentile
Published
2018-09-11T15:00Z
EPSS history
Timeline
  • 11 SEP 15:00Z
    The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (SSRF) attacks
    cvelistv5