Lucene search
HistoryOct 20, 2003 - 4:00 a.m.
CVE-2003-0749
cve-2003-0749
cross-site scripting
xss
sap
internet transaction server
wgate.dll
security vulnerability
6.1 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.945 High
EPSS
Percentile
99.2%
Cross-site scripting (XSS) vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to insert arbitrary web script and steal cookies via the ~service parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sap:internet_transaction_server | sap internet transaction server | eq | 4620.2.0.323011 |
Related
packetstorm
packetstorm
SAP-07-010.txt
2008-05-09 00:00:00
checkpoint_advisories
checkpoint_advisories
cve
cve
CVE-2006-5114
2006-10-03 04:03:00
6.1 Medium
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.945 High
EPSS
Percentile
99.2%
Related for CVE-2003-0749