Penetration tests found outdated libraries inside Hybris

[former_member707090]

Hi,

What would be the process to request from SAP Hybris update of the libraries like jQuery? My client run penetration tests agains our implementation, and the result showed, that there are outdated libraries inside Hybris platform. The client would like to have all the libraries updated.

Thank you and regards, Kamila

[arvind-kumar_avinash]

The best thing to do it this situation is to recommend with your client to get the Hybris platform updated to the latest version (e.g. v1811).

If you are already on the latest version or a version close to the latest version, you should create a support ticket with SAP and upgrade the libraries only when SAP approves it because the upgraded library may break some functionality and rolling back the things may be costly in terms of time, effort and money. If SAP approves it, it means that they have already tested it and you can do so confidently and you can also get timely support from SAP in case of any problem.

[former_member707090]

Hi, the time w had pen tests, we were on latest patch of 1808.