SAP Commerce Cloud (previously known as SAP Hybris Commerce), (HY_COM, versions 6.3, 6.4, 6.5, 6.6, 6.7, 1808, 1811), allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Commerce_cloud | Sap | 6.3 (including) | 6.3 (including) |
| Commerce_cloud | Sap | 6.4 (including) | 6.4 (including) |
| Commerce_cloud | Sap | 6.5 (including) | 6.5 (including) |
| Commerce_cloud | Sap | 6.6 (including) | 6.6 (including) |
| Commerce_cloud | Sap | 6.7 (including) | 6.7 (including) |
| Commerce_cloud | Sap | 1808 (including) | 1808 (including) |
| Commerce_cloud | Sap | 1811 (including) | 1811 (including) |
References
- http://www.securityfocus.com/bid/109076
- https://launchpad.support.sap.com/#/notes/2781873
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
- http://www.securityfocus.com/bid/109076
- https://launchpad.support.sap.com/#/notes/2781873
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575