SAP Hybris Deserialization RCE
Description
Virtualjdbc extension of SAP Hybris Commerce Cloud uses unsafe java deserialization and it's vulnerable to deserialization attacks. An attacker could exploit this vulnerability using specially-crafted serialized data to execute arbitrary code on the system or to perform a denial of service attack.
Remediation
Upgrade to the latest version of SAP Hybris.