CVE-2016-6859 Information disclosure in n/a

What is CVE-2016-6859?

CVE-2016-6859 is a medium-severity vulnerability in n/a, published on 31 Dec 2016. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain sensitive information by triggering an error and then reading a Java stack trace.

Weakness: CWE-200

Which versions are affected by CVE-2016-6859?

It affects 1 product.

Products include Sap Hybris.

How do I fix CVE-2016-6859?

No fix has been published for CVE-2016-6859 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-6859 being exploited?

There is no known exploitation of CVE-2016-6859 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2018-2463 Server-side request forgery in SAP Hybris Commerce High 8.6
• CVE-2014-8871 Path traversal in n/a High 7.5
• CVE-2019-0238 Cross-site scripting in SAP Commerce (ex. SAP Hybris Commerce) Medium 6.1
• CVE-2018-2505 Cross-site scripting in SAP Commerce (SAP Hybris Commerce) Medium 6.1
• CVE-2016-6856 Cross-site scripting in n/a Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-fwhf-h3cv-c43m.