Cross site scripting

2007-06-2918:30:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.9%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework (BC-MID-ICF) in the SAP Basis component 700 before SP12, and 640 before SP20, allow remote attackers to inject arbitrary web script or HTML via certain parameters associated with the default login error page.

CPENameOperatorVersion
sap_basis_component_640eq<= sp19
sap_basis_component_700eq<= sp11

CPE	Name	Operator	Version
	sap_basis_component_640	eq	<= sp19
	sap_basis_component_700	eq	<= sp11

References

osvdb.org/37749

secunia.com/advisories/25866

securityreason.com/securityalert/2849

www.securityfocus.com/archive/1/472345/100/0/threaded

www.vupen.com/english/advisories/2007/2381

exchange.xforce.ibmcloud.com/vulnerabilities/35107

www.csnc.ch/advisory/sap02.html